01 Record

CVE-2026-16959

Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector

MediumPUBLISHEDCNA: WPScan

Base score6.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

02 Description

Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector

Published

2026-08-21 06:00Z19 HR AGO

Last updated

2026-08-21 12:53Z12 HR AGO

Reserved

2026-07-24

Assigning CNA

WPScan

Record state

PUBLISHED

Severity

Medium (CVSS 6.8)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Weaknesses

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Base

SSVC decision

ExploitationnoneAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

efff3e7bbbd7769bbce77642923fdd60b6034193f2538f78ce14e2d5640cbafa

VendorProductVersionsPlatforms