PT-2026-25245 · David Lingren · Media Library Assistant

Doan Dinh Van · Publicado 2026-03-13 · Atualizado 2026-03-14 · CVE-2026-32399

Positive Technologies (AI Summary)

CVSS v3.1

8.5

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions David Lingren Media Library Assistant versions through 3.32

Description The software contains an improper neutralization of special elements used in an SQL command, leading to a blind SQL injection issue. This allows for potential unauthorized access or modification of data through crafted SQL queries. The API endpoints and vulnerable parameters are not specified in the provided information.

Recommendations Update David Lingren Media Library Assistant to a version later than 3.32.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-32399

Produtos afetados

Media Library Assistant

Referências · 5

• https://twitter.com/CVEnew/status/2032831452858167565 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2032562459530375585 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2032558058862170255 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-32-sql-injection-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32399 · Nota de Segurança