critical9.8
CVE-2020-11928
In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_…
Impact
In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_gallery via an admin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Davidlingren | Media Library Assistant | before 2.82 |