CVE-2023-4634

The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.09. This is due to insufficient controls on file paths being supplied to the 'mla_stream_file' parameter from the ~/includes/mla-stream-image.php file, where images are processed via Imagick(). This makes it possible for unauthenticated attackers to supply files via FTP that will make directory lists, local file inclusion, and remote code execution possible.

• CWE-73

• https://github.com/Patrowl/CVE-2023-4634/Exploit, Third Party Advisory
• https://packetstormsecurity.com/files/174508/wpmla309-lfiexec.tgzThird Party Advisory, VDB Entry
• https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/Exploit, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2955933%40media-library-assistant&new=2955933%40media-library-assistant&sfp_email=&sfph_mail=#file4Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/05c68377-feb6-442d-a3a0-1fbc246c7cbf?source=cveThird Party Advisory
• https://github.com/Patrowl/CVE-2023-4634/Exploit, Third Party Advisory
• https://packetstormsecurity.com/files/174508/wpmla309-lfiexec.tgzThird Party Advisory, VDB Entry
• https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/Exploit, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2955933%40media-library-assistant&new=2955933%40media-library-assistant&sfp_email=&sfph_mail=#file4Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/05c68377-feb6-442d-a3a0-1fbc246c7cbf?source=cveThird Party Advisory

Published

Sep 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-46322iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not…9.8
• CVE-2023-46324pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before…7.5
• CVE-2023-46326ZStack Cloud version 3.10.38 and before allows unauthenticat…8.8
• CVE-2023-46327Multiple MFPs (multifunction printers) provided by FUJIFILM …5.9
• CVE-2023-46331WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in i…5.5
• CVE-2023-46332WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Writ…5.5
• CVE-2023-46343In the Linux kernel before 6.5.9, there is a NULL pointer de…5.5
• CVE-2023-46344A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 16…5.4
• CVE-2023-46345Catdoc v0.95 was discovered to contain a NULL pointer derefe…7.5
• CVE-2023-46346In the module "Product Catalog (CSV, Excel, XML) Export PRO"…7.5
• CVE-2023-46347In the module "Step by Step products Pack" (ndk_steppingpack…9.8
• CVE-2023-46348SQL njection vulnerability in SunnyToo sturls before version…9.8