Known CVE

WordPress Media Library Assistant <= 3.34 - SQL Injection

David Lingren Media Library Assistant <= 3.34 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input.

CVE-2026-34885

High2026CVSS 8.5CWE-89

cve2026 · wp · wordpress · wp-plugin · sqli · media-library-assistant · authenticated

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website