Vulnerabilities / Media Library Assistant
Media Library Assistant vulnerabilities
Advisories WPSec published for Media Library Assistant. Other sources may list more. Its attack surface: Media Library Assistant on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-23 | WPSEC-2026-1565 | Media Library Assistant <= 3.42 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Attribute | Medium 6.4 | 3.43 |
| 2026-10-23 | WPSEC-2026-1564 | Media Library Assistant <= 3.42 - Cross-Site Request Forgery to Bulk Edit of Attachments | Medium 4.3 | 3.43 |
| 2026-10-23 | WPSEC-2026-1563 | Media Library Assistant <= 3.42 - Authenticated (Contributor+) Sensitive Information Exposure via 'author' Field-Level Substitution Parameters | Medium 4.3 | 3.43 |
License: CC BY 4.0