CVE Database /
CVE-2026-56012
CVE · High
CVE-2026-56012 — Media Library Assistant [media-library-assistant] < 3.36
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-56012
|
Media Library Assistant [media-library-assistant] < 3.36 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
High
8.5
|
< 3.36
|
3.36 |
2026-06-18 |
—
|
CVE-2026-56012
The Media Library Assistant plugin for WordPress contains a security flaw in versions 3.35 and below that enables malicious users with contributor privileges or higher to inject unauthorized SQL code into database queries. This vulnerability arises from inadequate protection against user input, allowing attackers to craft SQL statements that can extract sensitive data from the database.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings