PT-2023-4919 · WordPress · Media Library Assistant

Montel + 1 · CVE-2023-4634 · Published 2023-08-30 · Updated 2025-09-29

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Media Library Assistant plugin for WordPress versions up to, and including, 3.09

Description The issue is related to insufficient controls on file paths being supplied to the mla stream file parameter from the ~/includes/mla-stream-image.php file, where images are processed via Imagick(). This makes it possible for unauthenticated attackers to supply files via FTP that will make directory lists, local file inclusion, and remote code execution possible. The estimated number of potentially affected devices worldwide is around 70,000 WordPress sites.

Recommendations For Media Library Assistant plugin for WordPress versions up to, and including, 3.09, update to version 3.10 or newer as soon as possible to resolve the issue. As a temporary workaround, consider restricting access to the mla stream file parameter and the ~/includes/mla-stream-image.php file to minimize the risk of exploitation. Additionally, avoid using the mla stream file parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2023-05428

CVE-2023-4634

Affected Products

Media Library Assistant

References · 50

• 🔥 https://github.com/Patrowl/CVE-2023-4634 · Exploit
• 🔥 https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634 · Exploit
• 🔥 https://exploit-db.com/exploits/51737 · Exploit
• https://bdu.fstec.ru/vul/2023-05428 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4634 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4634 · Security Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2955933%40media-library-assistant&new=2955933%40media-library-assistant&sfp_email=&sfph_mail=#file4 · Patch
• https://wordfence.com/threat-intel/vulnerabilities/id/05c68377-feb6-442d-a3a0-1fbc246c7cbf?source=cve · Note
• https://twitter.com/_r_netsec/status/1698976281579356294 · Twitter Post
• https://t.me/rnetsec/19241 · Telegram Post
• https://twitter.com/Pepito_oh/status/1698973418064838690 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1699260621705847233 · Twitter Post
• https://t.me/cvenotify/57929 · Telegram Post
• https://twitter.com/axcheron/status/1699010752315592971 · Twitter Post
• https://wordpress.org/plugins/media-library-assistant · Note