Lucene search

CVE-2024-6823 Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action

🗓️ 13 Aug 2024 05:55:30Reported by WordfenceType

WordPress Media Library Assistant plugin <= 3.18 File Upload Vulnerabilit

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
RedhatCVE	CVE-2024-6823	5 Feb 202503:09	–	redhatcve
Patchstack	WordPress Media Library Assistant Plugin <= 3.18 is vulnerable to Arbitrary File Upload	13 Aug 202400:00	–	patchstack
NVD	CVE-2024-6823	13 Aug 202406:15	–	nvd
Vulnrichment	CVE-2024-6823 Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action	13 Aug 202405:30	–	vulnrichment
CVE	CVE-2024-6823	13 Aug 202406:15	–	cve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (August 12, 2024 to August 18, 2024)	22 Aug 202415:46	–	wordfence

[
  {
    "vendor": "dglingren",
    "product": "Media Library Assistant",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "3.18",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/media-library-assistant/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/9a446fe7-c97a-436e-b494-b924e6518297
plugins	www.plugins.trac.wordpress.org/changeset/3133909/
plugins	www.plugins.trac.wordpress.org/browser/media-library-assistant/trunk/includes/class-mla-settings.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Aug 2024 05:30Current

CVSS38.8

EPSS0.02663

CWE-434