CVE-2026-115594
WordPress Media LIbrary Assistant plugin <= 3.42 - Sensitive Data Exposure vulnerability
David Lingren Media LIbrary Assistant
CVSS
6.5MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version yet
What fixes it
No source in this snapshot names a fixed version.
Description
Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Retrieve Embedded Sensitive Data.This issue affects Media LIbrary Assistant: from n/a through 3.42.
Text from CVE List
Affected versions 1
- Media LIbrary Assistantaffected: all versions through 3.42CVE List