High · 8.5 CVE-2026-97293 EUVD-2026-89932GHSA-h77g-w44h-8mx2

WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: David Lingren Product: Media LIbrary Assistant

Description

Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.

Affected products

Vendor	Product	Affected	Fixed
David Lingren	Media LIbrary Assistant	≤ 3.41	—

References

https://patchstack.com/database/wordpress/plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-41-sql-injection-vulnerability?_s_id=cve vdb-entry