CVE-2024-57954

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-57954

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-57954

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-57954

The CVE-2024-57954 entry relates to Huawei HarmonyOS: a privilege/permission verification issue in the media library module. Public sources describe a privilege checking vulnerability that can be exploited to compromise confidentiality. Provided documents do not specify exact affected versions or...

CVE-2024-57954

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-57954

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-22768

Cross-Site Request Forgery CSRF vulnerability in JinHan Park Rocket Media Library Mime Type rocket-media-library-mime-type allows Stored XSS.This issue affects Rocket Media Library Mime Type: from n/a through = 2.1.0...

PT-2025-5812 · Unknown · Media Library Module

Name of the Vulnerable Software and Affected Versions: Media library module affected versions not specified Description: The issue concerns a permission verification vulnerability in the media library module. Successful exploitation of this vulnerability may affect service confidentiality. There ...

CVE-2024-3518

The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcodes in all versions up to, and including, 3.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

CVE-2024-30486

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Max Foundry Media Library Folders.This issue affects Media Library Folders: from n/a through 8.1.7...

CVE-2024-5605

The Media Library Assistant plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter within the mlatagcloud Shortcode in all versions up to, and including, 3.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2024-51661

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Command Injection.This issue affects Media LIbrary Assistant: from n/a through = 3.19...

CVE-2024-6823

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation involving the mla-inline-edit-upload-scripts AJAX action in all versions up to, and including, 3.18. This makes it possible for authenticated attackers, with Author-level...

CVE-2025-22768

Cross-Site Request Forgery CSRF vulnerability in JinHan Park Rocket Media Library Mime Type rocket-media-library-mime-type allows Stored XSS.This issue affects Rocket Media Library Mime Type: from n/a through = 2.1.0...

CVE-2025-22768 WordPress Rocket Media Library Mime Type plugin <= 2.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in JinHan Park Rocket Media Library Mime Type rocket-media-library-mime-type allows Stored XSS.This issue affects Rocket Media Library Mime Type: from n/a through = 2.1.0...

CVE-2025-22768 WordPress Rocket Media Library Mime Type plugin <= 2.1.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Qwerty23 Rocket Media Library Mime Type allows Stored XSS. This issue affects Rocket Media Library Mime Type: from n/a through 2.1.0...

CVE-2025-22768

CVE-2025-22768 – CSRF in the Rocket Media Library Mime Type WordPress plugin enables Stored XSS in versions up to 2.1.0. CVSS v3.1 base score 7.1 (HIGH). Exploitation details are not provided in the connected documents; remediation details in the sources indicate a fix beyond 2.1.0, but the exact...

WordPress plugin Rocket Media Library Mime Type 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerabilit...

CVE-2025-21256

Windows Digital Media Elevation of Privilege Vulnerability...

CVE-2025-22344

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in timmcdaniels Media Category Library media-category-library allows Reflected XSS.This issue affects Media Category Library: from n/a through = 2.7...