High · 8.5 CVE-2026-56012 EUVD-2026-37895GHSA-q46q-2v7c-wpch

WordPress Media LIbrary Assistant plugin <= 3.35 - SQL Injection vulnerability

Published Jun 18, 2026 · Updated Jun 18, 2026 · Assigned by Patchstack

Vendor: David Lingren Product: Media LIbrary Assistant

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows Blind SQL Injection.

This issue affects Media LIbrary Assistant: from n/a through 3.35.

Affected products

Vendor	Product	Affected	Fixed
David Lingren	Media LIbrary Assistant	≤ 3.35	—

References

https://patchstack.com/database/wordpress/plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-35-sql-injection-vulnerability?_s_id=cve vdb-entry