CVE-2023-0279

HIGH 7.2CVE-2023-0279 · Published 27/02/2023 · updated 17/06/2026

In short

CVE-2023-0279 is a HIGH (CVSS 7.2) vulnerability affecting media library assistant (media library assistant project).
Chance of exploitation in the next 30 days (EPSS): 0.78%, higher than 56.3% of all vulnerabilities.
Fix: update to 3.06 or later.

Package	Affected versions	Patched versions
media library assistant media_library_assistant_project	`< 3.06`	`3.06`

Description

The Media Library Assistant WordPress plugin before 3.06 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.

References

bulletin.iese.de/post/media-library-assistant_3-05_1 · Broken Link
wpscan.com/vulnerability/42db1ba5-1b14-41bd-a2b3-7243a84c9d3d · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free