Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 44
Reset filtersMedia Library Assistant <= 3.41 - Unauthenticated Stored Cross-Site Scripting
Media Library Assistant <= 3.41 - Authenticated (Contributor+) SQL Injection
Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter
Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import
Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter
Media Library Assistant < 3.40 - Authenticated (Author+) SQL Injection
Media Library Assistant <= 3.39 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media Library Assistant <= 3.39 - Authenticated (Author+) Arbitrary File Upload
Media Library Assistant <= 3.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media Library Assistant <= 3.38 - Unauthenticated Stored Cross-Site Scripting
Media Library Assistant <= 3.35 - Authenticated (Contributor+) SQL Injection
Media Library Assistant <= 3.35 - Reflected Cross-Site Scripting
Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form
Media Library Assistant <= 3.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Media Library Assistant <= 3.34 - Authenticated (Contributor+) SQL Injection
Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification
Media LIbrary Assistant <= 3.32 - Authenticated (Contributor+) SQL Injection
Media Library Assistant <= 3.29 - Unauthenticated Limited File Read
Media Library Assistant <= 3.29 - Missing Authorization
Media Library Assistant <= 3.28 - Authenticated (Author+) Stored Cross-Site Scripting
Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion
Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes
Media Library Assistant <= 3.24 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.