CVE-2022-41618 WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability
Unauthenticated attackers can access error logs in the Media Library Assistant WordPress plugin, potentially exposing sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-41618?
CVE-2022-41618 is a low-severity vulnerability in David Lingren Media Library Assistant (WordPress plugin), published on 18 Nov 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress.
Which versions are affected by CVE-2022-41618?
It affects 1 product.
Products include Davidlingren Media Library Assistant.
How do I fix CVE-2022-41618?
No fix has been published for CVE-2022-41618 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-41618 being exploited?
There is no known exploitation of CVE-2022-41618 in the wild and no public exploit code.
Other vulnerabilities in David Lingren Media Library Assistant (WordPress plugin)
- CVE-2023-4634 Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution
- CVE-2020-11928 Code injection in n/a
- CVE-2024-51661 WordPress Media Library Assistant plugin <= 3.19 - Remote Code Execution (RCE) vulnerability
- CVE-2024-6823 File upload in Media Library Assistant
- CVE-2024-5605 Media Library Assistant <= 3.16 - Authenticated (Contributor+) SQL Injection via order Parameter
Sources
Also known as GHSA-c343-52cw-6jvq.