Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

dglingren — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting dglingren. AI-powered Chinese analysis, POCs, and references for each vulnerability.

dglingren develops enterprise software solutions with a focus on web application frameworks and content management systems. Historically, vulnerabilities associated with this entity have commonly included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and access control issues. Security researchers have identified multiple critical vulnerabilities in their products, with 14 CVEs documented to date. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities suggests potential weaknesses in secure coding practices and security testing protocols within their development lifecycle.

Top products by dglingren: Media Library Assistant
CVE ID Title CVSS Severity Published
CVE-2026-6640 Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter — Media Library Assistant CWE-79 6.4 Medium 2026-09-11
CVE-2026-6642 Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import — Media Library Assistant CWE-79 6.4 Medium 2026-09-11
CVE-2026-6641 Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter — Media Library Assistant CWE-79 6.4 Medium 2026-09-11
CVE-2026-6075 Media Library Assistant <= 3.35 - Cross-Site Request Forgery via Bulk Action Form — Media Library Assistant CWE-352 8.1 High 2026-05-29
CVE-2026-3072 Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification — Media Library Assistant CWE-862 4.3 Medium 2026-03-05
CVE-2025-11738 Media Library Assistant <= 3.29 - Unauthenticated Limited File Read — Media Library Assistant CWE-73 5.3 Medium 2025-10-18
CVE-2025-8357 Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion — Media Library Assistant CWE-862 4.3 Medium 2025-08-19
CVE-2025-7035 Media Library Assistant <= 3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_tag_cloud and mla_term_list Shortcodes — Media Library Assistant CWE-79 6.4 Medium 2025-07-16
CVE-2024-11974 Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters — Media Library Assistant CWE-79 6.1 Medium 2025-01-04
CVE-2024-6823 Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action — Media Library Assistant CWE-434 8.8 High 2024-08-13
CVE-2024-5544 Media Library Assistant <= 3.17 - Reflected Cross-Site Scripting — Media Library Assistant CWE-79 6.1 Medium 2024-07-02
CVE-2024-5605 Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter — Media Library Assistant CWE-89 8.8 High 2024-06-20
CVE-2024-3518 Media Library Assistant <= 3.15 - Authenticated (Contributor+) SQL Injection via Shortcode — Media Library Assistant CWE-89 8.8 High 2024-05-21
CVE-2024-3519 Media Library Assistant <= 3.15 - Reflected Cross-Site Scripting via lang — Media Library Assistant CWE-87 6.1 Medium 2024-05-21
CVE-2024-2871 Media Library Assistant <= 3.13 - Authenticated (Contributor+) SQL Injection via Shortcode — Media Library Assistant CWE-89 6.4 Medium 2024-04-09
CVE-2024-2475 Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode — Media Library Assistant CWE-79 6.4 Medium 2024-03-29
CVE-2023-4716 Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Media Library Assistant CWE-79 6.4 Medium 2023-09-22
CVE-2023-4634 Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution — Media Library Assistant CWE-73 9.8 Critical 2023-09-06

This page lists every published CVE security advisory associated with dglingren. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.