Login Request a demo
ML
Product
Media LIbrary Assistant
by David Lingren · last CVE Oct 26, 2026
19
CVEs
0
On KEV
9.1
Max CVSS
6
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 1High 9Medium 9Low 0
Severity
All severities19Critical1High9Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Media LIbrary Assistant to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-115594
New
6.5
0%
Oct 26
WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability
Affected: through 3.42
CVE-2026-97294
6.5
0%
Oct 7
WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.41
CVE-2026-66601
6.5
0%
Aug 20
WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.39
CVE-2026-66591
6.5
0%
Aug 18
WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.39
CVE-2026-34897
6.5
0%
Apr 6
WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.34
CVE-2025-59590
5.9
0%
Sep 22
WordPress Media Library Assistant Plugin <= 3.28 - Cross Site Scripting (XSS) Vulnerability
Affected: through 3.28
CVE-2025-31627
5.9
0%
Mar 31
WordPress Media Library Assistant plugin <= 3.24 - Stored Cross Site Scripting (XSS) vulnerability
Affected: through 3.24
CVE-2025-63065
5.3
0%
Dec 9
WordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerability
Affected: through 3.29
CVE-2026-97295
New
4.3
0%
Oct 26
WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 3.42
Showing 9