CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file deletion in the /wp-content/uploads directory due to insufficient file path validation and user capability checking in the _process_mla_download_file function in all versions up to, and including, 3.27. This makes it possible for authenticated attackers, with Author-level access and above, to delete arbitrary files on the server from the /wp-content/uploads/ directory.
Explanation of Vulnerability in Simple Terms
Media Library Assistant versions 3.27 and earlier lack proper authorization checks, allowing authenticated users with low privileges to disrupt the site's availability. An attacker with a basic user account can trigger a denial-of-service condition without requiring user interaction. The vulnerability affects the plugin's core functionality and impacts site stability.
What an attacker can do
Disrupt site availability by triggering a denial-of-service condition with a low-privilege user account.
Potential impact on your site
Site availability may be degraded or interrupted by authenticated users with basic permissions.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site; no user interaction required.
Key dates
External resources
