CVE-2026-6640 | dglingren Media Library Assistant Plugin up to 3.35 on WordPress mla_link_attributes cross site scripting

September 11, 2026 Yanac

A vulnerability was found in dglingren Media Library Assistant Plugin up to 3.35 on WordPress and classified as problematic. This impacts an unknown function. The manipulation of the argument mla_link_attributes results in cross site scripting.

This vulnerability was named CVE-2026-6640. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More