Skip to content
OpenAdvisories

Vendor

David Lingren

25 known vulnerabilities.

Products

Media LIbrary Assistant 24 Media Library Assistant (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-119496

    WordPress Media LIbrary Assistant plugin <= 3.43 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Code Injection.This issue affects Media LIbrary Assistant: from n/a through 3.43.

    David Lingren Media LIbrary Assistant
  • Medium 4.3
    CVE-2026-119491

    WordPress Media LIbrary Assistant plugin <= 3.43 - Broken Access Control vulnerability

    Missing Authorization vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media LIbrary Assistant: from n/a through 3.43.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-118095

    WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows DOM-Based XSS.This issue affects Media LIbrary Assistant: from n/a through 3.42.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-115594

    WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Retrieve Embedded Sensitive Data.This issue affects Media LIbrary Assistant: from n/a through 3.42.

    David Lingren Media LIbrary Assistant
  • Medium 4.3
    CVE-2026-97295

    WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request Forgery.This issue affects Media LIbrary Assistant: from n/a through 3.42.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-97294

    WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-66601

    WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.39 versions.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-66591

    WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS. This issue affects Media LIbrary Assistant: from n/a through 3.39.

    David Lingren Media LIbrary Assistant
  • Medium 6.5
    CVE-2026-34897

    WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.34.

    David Lingren Media LIbrary Assistant
  • Medium 5.3
    CVE-2025-63065

    WordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media LIbrary Assistant: from n/a throug…

    David Lingren Media LIbrary Assistant
  • Medium 5.9
    CVE-2025-59590

    WordPress Media Library Assistant Plugin <= 3.28 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through <= 3.28.

    David Lingren Media LIbrary Assistant
  • Medium 5.9
    CVE-2025-31627

    WordPress Media Library Assistant plugin <= 3.24 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through <= 3.24.

    David Lingren Media LIbrary Assistant
  • Medium 5.9
    CVE-2023-24385

    WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)

    Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in David Lingren Media Library Assistant plugin <= 3.11 versions.

    David Lingren Media LIbrary Assistant
  • Medium 5.8
    CVE-2023-34010

    WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in submodule of David Lingren Media Library Assistant plugin  <= 3.0.7 versions.

    David Lingren Media LIbrary Assistant