CVE-2026-119491: WordPress Media LIbrary Assistant plugin <= 3.43 - Broken Access Control vulnerability

Q: Which plugin versions are affected?

Media Library Assistant versions through 3.43 are affected. The available data does not identify a fixed version.

Q: What access does an attacker need to exploit this issue?

The available information identifies missing authorization and incorrectly configured access-control levels, but does not specify the attacker’s required role, authentication status, or the affected action.

Q: Are default plugin installations affected?

The data does not say whether exploitation requires a non-default configuration. It identifies the issue as an access-control problem in affected versions.

Q: How can I determine whether my site is affected?

Check whether Media Library Assistant is installed and determine its version. Installations running version 3.43 or an earlier affected version should be treated as potentially affected.

Published Nov 7, 2026

Updated

Missing Authorization vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media LIbrary Assistant: from n/a through 3.43.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Media Library Assistant to a version that resolves this vulnerability.
Fixed in 3.44

Event History

Nov 7, 2026

CVE Published

via MITRE·09:12 AM

Data Sourced

via MITRE·09:12 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which plugin versions are affected?

Media Library Assistant versions through 3.43 are affected. The available data does not identify a fixed version.

What access does an attacker need to exploit this issue?

The available information identifies missing authorization and incorrectly configured access-control levels, but does not specify the attacker’s required role, authentication status, or the affected action.

Are default plugin installations affected?

The data does not say whether exploitation requires a non-default configuration. It identifies the issue as an access-control problem in affected versions.

How can I determine whether my site is affected?

Check whether Media Library Assistant is installed and determine its version. Installations running version 3.43 or an earlier affected version should be treated as potentially affected.

CVE-2026-119491: WordPress Media LIbrary Assistant plugin <= 3.43 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Which plugin versions are affected?

What access does an attacker need to exploit this issue?

Are default plugin installations affected?

How can I determine whether my site is affected?

Company

Resources

Contact

Frequently Asked Questions

Which plugin versions are affected?

What access does an attacker need to exploit this issue?

Are default plugin installations affected?

How can I determine whether my site is affected?