WordPress Media Library Assistant 3.09 LFI / Remote Code Execution

WordPress Media Library Assistant plugin versions prior to 3.10 are affected by an unauthenticated remote reference to Imagick() conversion which allows attacker to perform local file inclusion and remote code execution depending on the Imagick configuration on the remote server.

assistant attacker code code execution configuration conversion file inclusion lfi library local media plugin reference remote code remote code execution remote server server unauthenticated wordpress