Media Library Assistant

Authenticated (Contributor+) Stored CrossSite Scripting via mla_tag_cloud and mla_term_list Shortcodes vulnerability <= 3.26

Stored Cross Site Scripting (XSS) vulnerability <= 3.24

Reflected CrossSite Scripting vulnerability <= 3.23

Remote Code Execution (RCE) vulnerability <= 3.19

Authenticated (Author+) Arbitrary File Upload via mlainlineedituploadscripts AJAX Action vulnerability <= 3.18