34028 matches found
CVE-2026-16959 Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector
The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...
Chromium: CVE-2026-76035 Inappropriate implementation in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
SUSE CVE-2026-76035
Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
OPENSUSE-SU-2026:11561-1 chromedriver-151.0.7922.169-1.1 on GA media
These are all security issues fixed in the chromedriver-151.0.7922.169-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11565-1 libecpg6-18.6-1.1 on GA media
These are all security issues fixed in the libecpg6-18.6-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-72818
creationtimestamp| type| source ---|---|--- 2026-08-20 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkdyg4ok727 2026-08-21 00:31:12+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtkj2hszzn25...
CVE-2026-66592
creationtimestamp| type| source ---|---|--- 2026-08-20 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjdkgqbuq2c 2026-08-20 14:07:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjg7o3igv2m...
CVE-2026-66600
Author Arbitrary File Upload in Media LIbrary Assistant = 3.39 versions...
CVE-2026-66601
Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...
CVE-2026-66600 WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability
Author Arbitrary File Upload in Media LIbrary Assistant = 3.39 versions...
EUVD-2026-63342
Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...
EUVD-2026-63341
Author Arbitrary File Upload in Media LIbrary Assistant = 3.39 versions...
CVE-2026-66600
Media Library Assistant WordPress plugin (versions ≤ 3.39) allows users with the Author role to upload arbitrary files, potentially enabling remote code execution. CVSS 9.1 (Critical) reflects network-exploitable, low-complexity attack with full confidentiality, integrity, and availability impact...
CVE-2026-66601 WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...
CVE-2026-66601
Subscriber-level authenticated users can inject arbitrary JavaScript into the Media Library Assistant plugin (≤3.39) admin interface, enabling session hijacking or data theft. CVSS 6.5 (MEDIUM). Update to version 3.40 or later; no in-the-wild exploitation reported. See: https://patchstack.com/dat...
CVE-2026-17153
The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images...
CVE-2026-17153 AI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint
The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images...
CVE-2026-17153
AI Agent by SiteGround plugin (≤1.2.7) has a missing authorization check on its /generate-content REST endpoint, allowing authenticated Contributor-level users to upload images to the media library despite lacking the upload_files capability. The sg_ai_studio_gutenberg_nonce is issued to any bloc...