Media Library Assistant <= 2.81 is vulnerable to Authenticated Remote Code Execution (RCE) vulnerability

Published
2020-04-18

In the Media Library Assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_gallery via an admin.

CVE

https://www.cve.org/CVERecord?id=CVE-2020-11928

CVSS

Score:7.3

Severity:High

Version: 2.81

There is a patch available in v2.82 and we strongly recommend you update to this version as soon as possible.