CVE Database /
CVE-2020-11928
CVE · Critical
CVE-2020-11928 — Media Library Assistant [media-library-assistant] < 2.82
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2020-11928
|
Media Library Assistant [media-library-assistant] < 2.82 |
— |
Critical
9.8
|
< 2.82
|
2.82 |
2019-12-15 |
—
|
CVE-2020-11928
The Media Library Assistant plugin before version 2.82 contains a remote code execution vulnerability that allows administrators to execute arbitrary code through the tax_query, meta_query, or date_query parameters when using the mla_gallery function. An authenticated admin user could exploit this flaw to gain unauthorized command execution on the affected WordPress installation. The vulnerability was patched in version 2.82 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings