Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Media Library Assistant 3.44 Clear all filters
TI-2026-83587 CVE-2026-113482 · GHSA-894j-4953-62g7

Stored cross-site scripting in Media Library Assistant via shortcode attribute

Priority LOW 32

The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribute of generated links, allowing users with the Contributor role and above to perf…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00235 Published 2026-11-01 Fixed in 3.44 CWE-79
TI-2026-83586 CVE-2026-113481 · GHSA-hqj9-3pgq-546r

Missing authorization in Media Library Assistant exposes taxonomy terms

Priority LOW 19

The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a post before disclosing which taxonomy terms are assigned to it, allowing any authenticated user, such…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00162 Published 2026-11-01 Fixed in 3.44 CWE-862