Medium · 4.3 CVE-2026-97295 EUVD-2026-109715GHSA-qwqj-xj3f-497v

WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability

Published Oct 26, 2026 · Updated Oct 26, 2026 · Assigned by Patchstack

Vendor: David Lingren Product: Media LIbrary Assistant

Description

Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request Forgery.This issue affects Media LIbrary Assistant: from n/a through 3.42.

Affected products

Vendor	Product	Affected	Fixed
David Lingren	Media LIbrary Assistant	≤ 3.42	—

References

https://patchstack.com/database/wordpress/plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-42-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry