Security Advisory

CVE-2026-16959

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-21 06:00:16

Last updated 2026-08-21 12:53:36

Assigner WPScan

CVSS score 6.8

State PUBLISHED

Description

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection.

← Browse all CVEs View on cve.org ↗