Skip to content
OpenAdvisories

Vendor

David Lingren

25 known vulnerabilities.

David Lingren at a glance

Last 12 months
19
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 1 vulnerability Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 1 vulnerability Mar April 2026: 2 vulnerabilities May 2026: 0 vulnerabilities June 2026: 2 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 4 vulnerabilities, 1 critical September 2026: 1 vulnerability Sep October 2026: 6 vulnerabilities November 2026: 2 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202620
Oct 202660
Sep 202610
Aug 202641
Jul 202600
Jun 202620
May 202600
Apr 202620
Mar 202610
Feb 202600
Jan 202600
Dec 202510
Nov 202500
Oct 202500
Sep 202510
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202510
Feb 202500
Jan 202500
Dec 202400

Products

Media LIbrary Assistant 24 Media Library Assistant (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Medium 5.3
    CVE-2026-119496

    WordPress Media LIbrary Assistant plugin <= 3.43 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Code Injection.This issue affects Media LIbrary Assistant: from n/a through 3.43.

    David Lingren Media LIbrary Assistant
  • Medium 4.3
    CVE-2026-119491

    WordPress Media LIbrary Assistant plugin <= 3.43 - Broken Access Control vulnerability

    Missing Authorization vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media LIbrary Assistant: from n/a through 3.43.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-118095

    WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows DOM-Based XSS.This issue affects Media LIbrary Assistant: from n/a through 3.42.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-115594

    WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Retrieve Embedded Sensitive Data.This issue affects Media LIbrary Assistant: from n/a through 3.42.

    David Lingren Media LIbrary Assistant
  • High 8.5
    CVE-2026-115948

    WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.42.

    David Lingren Media LIbrary Assistant
  • Medium 4.3
    CVE-2026-97295

    WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request Forgery.This issue affects Media LIbrary Assistant: from n/a through 3.42.

    David Lingren Media LIbrary Assistant
  • High 7.1
    CVE-2026-95609

    WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-97294

    WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41.

    David Lingren Media LIbrary Assistant
  • High 8.5
    CVE-2026-97293

    WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability

    Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.

    David Lingren Media LIbrary Assistant
  • Critical 9.1
    CVE-2026-66600

    WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability

    Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-66601

    WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.39 versions.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-66591

    WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS. This issue affects Media LIbrary Assistant: from n/a through 3.39.

    David Lingren Media LIbrary Assistant
  • High 7.1
    CVE-2026-61963

    WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.

    David Lingren Media LIbrary Assistant
  • High 8.5
    CVE-2026-56012

    WordPress Media LIbrary Assistant plugin <= 3.35 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL Injection. This issue affects Media LIbrary Assistant: from n/a through 3.35.

    David Lingren Media LIbrary Assistant
  • High 7.1
    CVE-2026-54198

    WordPress Media LIbrary Assistant plugin <= 3.35 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-34897

    WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.34.

    David Lingren Media LIbrary Assistant
  • High 8.5
    CVE-2026-34885 Scanner template

    WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.34.

    David Lingren Media LIbrary Assistant
  • High 8.5
    CVE-2026-32399

    WordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through <= 3.32.

    David Lingren Media LIbrary Assistant
  • Medium 5.3
    CVE-2025-63065

    WordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media LIbrary Assistant: from n/a throug…

    David Lingren Media LIbrary Assistant
  • Medium 5.9
    CVE-2025-59590

    WordPress Media Library Assistant Plugin <= 3.28 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through <= 3.28.

    David Lingren Media LIbrary Assistant
  • Medium 5.9
    CVE-2025-31627

    WordPress Media Library Assistant plugin <= 3.24 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through <= 3.24.

    David Lingren Media LIbrary Assistant
  • Critical 9.1
    CVE-2024-51661

    WordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerability

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Command Injection.This issue affects Media LIbrary Assistant: from n/a through <= …

    David Lingren Media LIbrary Assistant
  • Medium 5.9
    CVE-2023-24385

    WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)

    Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in David Lingren Media Library Assistant plugin <= 3.11 versions.

    David Lingren Media LIbrary Assistant
  • Medium 5.8
    CVE-2023-34010

    WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in submodule of David Lingren Media Library Assistant plugin  <= 3.0.7 versions.

    David Lingren Media LIbrary Assistant
  • Low 3.7
    CVE-2022-41618

    WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability

    Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress.

    David Lingren Media Library Assistant (WordPress plugin) Web / CMS