CVE-2026-16959 | Media Library Assistant Plugin up to 3.39 on WordPress Media Library Query Handlers Search sql injection

August 21, 2026 Yanac

A vulnerability classified as critical was found in Media Library Assistant Plugin up to 3.39 on WordPress. This affects an unknown part of the component Media Library Query Handlers. The manipulation of the argument Search results in sql injection.

This vulnerability is cataloged as CVE-2026-16959. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More