CVE-2026-32399: WordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerability
Published Mar 13, 2026
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through <= 3.32.
Affected Software
2 affected components
media-library-assistant>=n/a, <=3.32
wordpress/media-library-assistant<=3.32
Event History
Mar 13, 2026
CVE Published
via MITRE·11:42 AM
Data Sourced
via MITRE·11:42 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:54 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-32399?
The severity of CVE-2026-32399 is high with a CVSS score of 8.5.
2
How do I fix CVE-2026-32399?
To fix CVE-2026-32399, update the Media Library Assistant plugin to version 3.33 or later.
3
What is the impact of CVE-2026-32399?
CVE-2026-32399 can lead to blind SQL injection attacks, allowing an attacker to manipulate the database.
4
Which versions of the Media Library Assistant plugin are affected by CVE-2026-32399?
CVE-2026-32399 affects all versions of Media Library Assistant from n/a through 3.32.
5
Who is affected by CVE-2026-32399?
Anyone using Media Library Assistant plugin versions 3.32 or earlier on WordPress is affected by CVE-2026-32399.