Lucene search

K
patchstackStealthcopterPATCHSTACK:2E97E9CC78CAE133725C6795B0C272C5
HistoryMar 26, 2024 - 12:00 a.m.

WordPress Media Library Assistant Plugin <= 3.13 is vulnerable to SQL Injection

2024-03-2600:00:00
stealthcopter
patchstack.com
wordpress
media library assistant
plugin
vulnerable
version 3.13
sql injection
owasp
a1
injection
cve-2024-2871
patch
low priority
cvss
severity low
developer claim ownership
psid 35f3b6344141
credits stealthcopter
required privilege contributor
published 26 march 2024

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

6.8

Confidence

Low

Software

Media Library Assistant

Type

Plugin

Vulnerable versions

<= 3.13

Fixed in

3.14

OWASP Top 10

A1: Injection

Classification

SQL Injection

CVE

CVE-2024-2871

Patch priority

Low

CVSS severity

Low (8.5)

Developer

Claim ownership

PSID

35f3b6344141

Credits

stealthcopter

Required privilege

Contributor

Published

26 March, 2024

Vulnerability details

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
media_library_assistant_projectmedia_library_assistantRange3.13wordpress
VendorProductVersionCPE
media_library_assistant_projectmedia_library_assistant*cpe:2.3:a:media_library_assistant_project:media_library_assistant:*:*:*:*:*:wordpress:*:*

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

AI Score

6.8

Confidence

Low

Related for PATCHSTACK:2E97E9CC78CAE133725C6795B0C272C5