WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability
36Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 8.5epss 1.7%
exploitation probability
1.7%top 25% of all CVEs
observed exploitation
nono source reports it
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.34.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Affected products
David Lingren · Media LIbrary Assistant