The Media Library Assistant plugin prior to 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.
davidlingren media library assistant