Media Library Assistant vulnerabilities | LiveThreat CVE Feed

Product

Media Library Assistant

by David Lingren · last CVE Oct 29, 2026

CVEs

On KEV

9.1

Max CVSS

New 30D

Vulnerabilities22 In the news0 Timeline

Severity mix

Critical 1High 9Medium 12Low 0

Severity

All severities22 Critical1 High9 Medium12 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Media Library Assistant to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-118095 New	6.5	–	Oct 29	WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerability Affected: through 3.42
CVE-2026-115594 New	6.5	0%	Oct 26	WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability Affected: through 3.42
CVE-2026-97294	6.5	0%	Oct 7	WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability Affected: through 3.41
CVE-2026-66601	6.5	0%	Aug 20	WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability Affected: through 3.39
CVE-2026-66591	6.5	0%	Aug 18	WordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability Affected: through 3.39
CVE-2026-34897	6.5	0%	Apr 6	WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability Affected: through 3.34
CVE-2023-34010	6.1	0%	Aug 5	WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS) Affected: through 3.0.7
CVE-2025-59590	5.9	0%	Sep 22	WordPress Media Library Assistant Plugin <= 3.28 - Cross Site Scripting (XSS) Vulnerability Affected: through 3.28
CVE-2025-31627	5.9	0%	Mar 31	WordPress Media Library Assistant plugin <= 3.24 - Stored Cross Site Scripting (XSS) vulnerability Affected: through 3.24
CVE-2025-63065	5.3	0%	Dec 9	WordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerability Affected: through 3.29
CVE-2023-24385	4.8	0%	Oct 17	WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS) Affected: through 3.11
CVE-2026-97295 New	4.3	0%	Oct 26	WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 3.42