CVE-2025-11738

A vulnerability has been discovered in Media Library Assistant plugin versions prior to 3.30 that allows unauthorized users to access and view the contents of certain file types stored on the server, including AI, EPS, PDF, and PS files, potentially exposing sensitive data. This issue arises from a flaw in the mla-stream-image.php file, which can be exploited without requiring authentication.

Based on public CVE data (MITRE/NVD).