# cve.now: David Lingren

The newest entries naming David Lingren as an affected vendor (up to 200), of 25 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-119496](https://cve.now/CVE-2026-119496.md): WordPress Media LIbrary Assistant plugin \<= 3.43 - Content Injection vulnerability (CVSS 5.3)
- [CVE-2026-119491](https://cve.now/CVE-2026-119491.md): WordPress Media LIbrary Assistant plugin \<= 3.43 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2026-118095](https://cve.now/CVE-2026-118095.md): WordPress Media LIbrary Assistant plugin \<= 3.42 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-115594](https://cve.now/CVE-2026-115594.md): WordPress Media LIbrary Assistant plugin \<= 3.42 - Sensitive Data Exposure vulnerability (CVSS 6.5)
- [CVE-2026-115948](https://cve.now/CVE-2026-115948.md): WordPress Media LIbrary Assistant plugin \<= 3.42 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2026-97295](https://cve.now/CVE-2026-97295.md): WordPress Media LIbrary Assistant plugin \<= 3.42 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2026-95609](https://cve.now/CVE-2026-95609.md): WordPress Media LIbrary Assistant plugin \<= 3.41 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-97294](https://cve.now/CVE-2026-97294.md): WordPress Media LIbrary Assistant plugin \<= 3.41 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-97293](https://cve.now/CVE-2026-97293.md): WordPress Media LIbrary Assistant plugin \<= 3.41 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2026-66601](https://cve.now/CVE-2026-66601.md): WordPress Media LIbrary Assistant plugin \<= 3.39 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-66600](https://cve.now/CVE-2026-66600.md): WordPress Media LIbrary Assistant plugin \<= 3.39 - Arbitrary File Upload vulnerability (CVSS 9.1)
- [CVE-2026-66591](https://cve.now/CVE-2026-66591.md): WordPress Media LIbrary Assistant plugin \<= 3.39 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-61963](https://cve.now/CVE-2026-61963.md): WordPress Media LIbrary Assistant plugin \<= 3.38 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-56012](https://cve.now/CVE-2026-56012.md): WordPress Media LIbrary Assistant plugin \<= 3.35 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2026-54198](https://cve.now/CVE-2026-54198.md): WordPress Media LIbrary Assistant plugin \<= 3.35 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-34897](https://cve.now/CVE-2026-34897.md): WordPress Media LIbrary Assistant plugin \<= 3.34 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-34885](https://cve.now/CVE-2026-34885.md): WordPress Media LIbrary Assistant plugin \<= 3.34 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2026-32399](https://cve.now/CVE-2026-32399.md): WordPress Media LIbrary Assistant plugin \<= 3.32 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2025-63065](https://cve.now/CVE-2025-63065.md): WordPress Media LIbrary Assistant plugin \<= 3.29 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2025-59590](https://cve.now/CVE-2025-59590.md): WordPress Media Library Assistant Plugin \<= 3.28 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9)
- [CVE-2025-31627](https://cve.now/CVE-2025-31627.md): WordPress Media Library Assistant plugin \<= 3.24 - Stored Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-51661](https://cve.now/CVE-2024-51661.md): WordPress Media Library Assistant plugin \<= 3.19 - Remote Code Execution (RCE) vulnerability (CVSS 9.1)
- [CVE-2023-24385](https://cve.now/CVE-2023-24385.md): WordPress Media Library Assistant Plugin \<= 3.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-34010](https://cve.now/CVE-2023-34010.md): WordPress Media Library Assistant Plugin \<= 3.0.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.8)
- [CVE-2022-41618](https://cve.now/CVE-2022-41618.md): WordPress Media Library Assistant plugin \<= 3.00 - Unauthenticated Error Log Disclosure vulnerability (CVSS 3.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/david-lingren
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.