/Vulnerability Library

WordPress Media Library Assistant <= 3.34 - SQL Injection

CVE-2026-34885
Verified

Description

David Lingren Media Library Assistant <= 3.34 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input.

Severity

High

CVSS Score

8.5

Exploit Probability

1%

Published Date

April 8, 2026

Template Author

theamanrawat

CVE-2026-34885.yaml
8.5Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
CVE ID:
cve-2026-34885
CWE ID:
cwe-89

References

https://patchstack.com/database/vulnerability/wordpress-media-library-assistant-plugin-3-34-sql-injection-vulnerabilityhttps://plugins.svn.wordpress.org/media-library-assistant/tags/https://nvd.nist.gov/vuln/detail/CVE-2026-34885

Remediation Steps

Update to the latest version beyond 3.34.