Skip to content
OpenAdvisories

Vendor

David Lingren

25 known vulnerabilities.

Products

Media LIbrary Assistant 24 Media Library Assistant (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.5
    CVE-2026-115948

    WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.42.

    David Lingren Media LIbrary Assistant
  • High 7.1
    CVE-2026-95609

    WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41.

    David Lingren Media LIbrary Assistant
  • High 8.5
    CVE-2026-97293

    WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability

    Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.

    David Lingren Media LIbrary Assistant
  • High 7.1
    CVE-2026-61963

    WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.

    David Lingren Media LIbrary Assistant
  • High 8.5
    CVE-2026-56012

    WordPress Media LIbrary Assistant plugin <= 3.35 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL Injection. This issue affects Media LIbrary Assistant: from n/a through 3.35.

    David Lingren Media LIbrary Assistant
  • High 7.1
    CVE-2026-54198

    WordPress Media LIbrary Assistant plugin <= 3.35 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.

    David Lingren Media LIbrary Assistant
  • High 8.5
    CVE-2026-34885 Scanner template

    WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.34.

    David Lingren Media LIbrary Assistant
  • High 8.5
    CVE-2026-32399

    WordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through <= 3.32.

    David Lingren Media LIbrary Assistant