CVE-2026-103875 | dglingren Media Library Assistant Plugin up to 3.42 on WordPress Shortcode search-string cross site scripting

October 29, 2026 Yanac

A vulnerability was found in dglingren Media Library Assistant Plugin up to 3.42 on WordPress. It has been declared as problematic. The impacted element is an unknown function of the component Shortcode Handler. Such manipulation of the argument search-string leads to cross site scripting.

This vulnerability is documented as CVE-2026-103875. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More