David Lingren

14 CVEs across 2 David Lingren products. Browse David Lingren vulnerabilities, severities, and proof-of-concept exploits.

David Lingren products with known CVEs

ProductCVEs
Media Library Assistant13
Media Library Assistant (WordPress Plugin)1
David Lingren CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66591Medium6.52026-08-18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS. …
CVE-2026-61963High7.12026-08-06Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.
CVE-2026-56012High8.52026-06-18Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL In…
CVE-2026-54198High7.12026-06-16Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.
CVE-2026-34897Medium6.52026-04-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS.T…
CVE-2026-34885High8.52026-04-06Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injectio…
CVE-2026-32399High8.52026-03-13Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assis…
CVE-2025-63065Medium5.32025-12-09Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly C…
CVE-2025-59590Medium5.92025-09-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assis…
CVE-2025-31627Medium5.92025-03-31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assis…
CVE-2024-51661Critical9.12024-11-04Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in David Lingren Media LIbrary Assistant media-library…
CVE-2023-24385Medium5.92023-10-17Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in David Lingren Media Library Assistant plugin <= 3.11 versions.
CVE-2023-34010Medium5.82023-08-05Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in submodule of David Lingren Media Library Assistant plugin  <= 3.0.7 versions.
CVE-2022-41618Low3.72022-11-18Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress.