Medium · 6.5 CVE-2026-115594 EUVD-2026-109728GHSA-2hf4-3g9h-fgf2

WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability

Published Oct 26, 2026 · Updated Oct 26, 2026 · Assigned by Patchstack

Vendor: David Lingren Product: Media LIbrary Assistant

Description

Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Retrieve Embedded Sensitive Data.This issue affects Media LIbrary Assistant: from n/a through 3.42.

Affected products

Vendor	Product	Affected	Fixed
David Lingren	Media LIbrary Assistant	≤ 3.42	—

References

https://patchstack.com/database/wordpress/plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-42-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry