CVE-2026-34885CWE-89

WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability

High · published April 6, 2026

CVSS v3.1
8.5
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.34.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01199 · 67.9th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-04-06T14:47Z
EPSS history
Timeline
  • 06 APR 14:47Z
    WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability
    cvelistv5