Critical · 9.1 CVE-2024-51661 EUVD-2024-45466GHSA-fm3h-xpw5-j8xh

WordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerability

Published Nov 4, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: David Lingren Product: Media LIbrary Assistant

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Command Injection.This issue affects Media LIbrary Assistant: from n/a through <= 3.19.

Affected products

Vendor	Product	Affected	Fixed
David Lingren	Media LIbrary Assistant	≤ 3.19	—

References

https://patchstack.com/database/Wordpress/Plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-19-remote-code-execution-rce-vulnerability?_s_id=cve vdb-entry