Skip to content
OpenAdvisories
High · 8.5 Scanner template CVE-2026-34885 EUVD-2026-19309GHSA-39w8-449c-wqw6

WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability

Published Apr 6, 2026 · Updated Apr 6, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.34.

Affected products

VendorProductAffectedFixed
David Lingren Media LIbrary Assistant ≤ 3.34 —

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References