CVE-2026-95609: WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Q: Which installations are affected?

Media Library Assistant versions through 3.41 are affected. The available data does not identify a fixed version.

Q: What type of impact can successful exploitation have?

This is a stored cross-site scripting vulnerability. The supplied severity vector indicates network-reachable exploitation with low attack complexity, no required privileges, and user interaction required; confidentiality, integrity, and availability impacts are rated low.

Published Oct 9, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41.

Affected Software

1 affected component

David Lingren Media Library Assistant<=3.41

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/media-library-assistant to a version that resolves this vulnerability.
Fixed in 3.42

Event History

Oct 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

Media Library Assistant versions through 3.41 are affected. The available data does not identify a fixed version.

What type of impact can successful exploitation have?

This is a stored cross-site scripting vulnerability. The supplied severity vector indicates network-reachable exploitation with low attack complexity, no required privileges, and user interaction required; confidentiality, integrity, and availability impacts are rated low.

CVE-2026-95609: WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

What type of impact can successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What type of impact can successful exploitation have?