Cloud Vulnerability DB
A community-led vulnerabilities database
Introducing Wiz for Exposure Management: Unify, prioritize, and remediate exposures everywhere.
Vulnerability DatabaseCVE-2020-11928
CVE-2020-11928:
WordPress vulnerability analysis and mitigation
Overview
CVE-2020-11928 is a Remote Code Execution vulnerability discovered in the media-library-assistant WordPress plugin versions before 2.82. The vulnerability was disclosed on April 19, 2020, affecting the plugin's mla_gallery functionality (NVD CVE, MITRE CVE).
Technical details
The vulnerability exists in the mlagallery functionality where Remote Code Execution can occur via the taxquery, metaquery, or datequery parameters when accessed by an administrator. The severity of this vulnerability is rated as CRITICAL with a CVSS v3.1 Base Score of 9.8 (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) (NVD CVE).
Impact
The vulnerability allows an attacker to execute arbitrary code on the affected system with administrator privileges, potentially leading to complete system compromise. This could result in unauthorized access to sensitive data, modification of website content, and potential server takeover (NVD CVE).
Mitigation and workarounds
Users should immediately upgrade to media-library-assistant version 2.82 or later to address this vulnerability. The fix has been implemented in the updated version available through the WordPress plugin repository (WordPress Plugin).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management