Media LIbrary Assistant vulnerabilities | LiveThreat CVE Feed

Product

Media LIbrary Assistant

by David Lingren · last CVE Oct 26, 2026

CVEs

On KEV

9.1

Max CVSS

New 30D

Vulnerabilities18 In the news0 Timeline

Severity mix

Critical 1High 8Medium 9Low 0

Severity

All severities18 Critical1 High8 Medium9 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Media LIbrary Assistant to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-66600	9.1	0%	Aug 20	WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability Affected: through 3.39
CVE-2026-115948 New	8.5	0%	Oct 26	WordPress Media LIbrary Assistant plugin <= 3.42 - SQL Injection vulnerability Affected: through 3.42
CVE-2026-97293	8.5	0%	Sep 30	WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability Affected: through 3.41
CVE-2026-56012	8.5	0%	Jun 18	WordPress Media LIbrary Assistant plugin <= 3.35 - SQL Injection vulnerability Affected: through 3.35
CVE-2026-34885	8.5	2%	Apr 6	WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability Affected: through 3.34
CVE-2026-32399	8.5	0%	Mar 13	WordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerability Affected: through 3.32
CVE-2026-95609	7.1	0%	Oct 9	WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability Affected: through 3.41
CVE-2026-61963	7.1	0%	Aug 6	WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability Affected: through 3.38
CVE-2026-54198	7.1	0%	Jun 16	WordPress Media LIbrary Assistant plugin <= 3.35 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 3.35
CVE-2026-115594 New	6.5	0%	Oct 26	WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability Affected: through 3.42
CVE-2026-97294	6.5	0%	Oct 7	WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability Affected: through 3.41
CVE-2026-66601	6.5	0%	Aug 20	WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability Affected: through 3.39
CVE-2026-66591	6.5	0%	Aug 18	WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability Affected: through 3.39
CVE-2026-34897	6.5	0%	Apr 6	WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability Affected: through 3.34
CVE-2025-59590	5.9	0%	Sep 22	WordPress Media Library Assistant Plugin <= 3.28 - Cross Site Scripting (XSS) Vulnerability Affected: through 3.28
CVE-2025-31627	5.9	0%	Mar 31	WordPress Media Library Assistant plugin <= 3.24 - Stored Cross Site Scripting (XSS) vulnerability Affected: through 3.24
CVE-2025-63065	5.3	0%	Dec 9	WordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerability Affected: through 3.29
CVE-2026-97295 New	4.3	0%	Oct 26	WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 3.42