Vulnerabilities > Davidlingren > Media Library Assistant > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-04-20 CVE-2020-11928 Unspecified vulnerability in Davidlingren Media Library Assistant
In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_gallery via an admin.
network
low complexity
davidlingren
critical
9.8