CVE-2026-61963: WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.

Affected Software

1 affected component

WordPress plugin/Media LIbrary Assistant<=3.38

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Media LIbrary Assistant plugin to a version that resolves this vulnerability.
Fixed in 3.39

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

CVE-2026-61963 has a severity rating of 7.1, categorized as high.

CVE-2026-61963 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the Media Library Assistant plugin for WordPress.

To mitigate CVE-2026-61963, update the Media Library Assistant plugin to the latest version beyond 3.38.

Versions of the Media Library Assistant plugin that are 3.38 and below are affected by CVE-2026-61963.

No, CVE-2026-61963 can be exploited without user authentication.