Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

Media Library Assistant: Authenticated XSS, SQLi & Unauth File Upload Vulnerabilities

www.wordfence.com 2026-09-11 查看中文 →

Security Advisory Medium Media Library Assistant

Affected:

Media Library Assistant <= 1.0.0

Fixed in:

1.0.1

Referenced CVEs: CVE-2026-6640 · 6.4

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Media Library Accounted <=3.29 Stored XSS in Bulk Edit Field 2026-09-11 WordPress WP-Forms Critical SQL Injection CVE Analysis & PoC 2026-09-11 Simple Ajax Chat CVE-2020-28321 RCE Analysis & Fix 2026-09-11 Elementor <= 22.0 Unauthenticated SQL Injection 2026-09-11 Fluxing Chat Widget Reflected XSS Vulnerability Analysis & Fix 2026-09-11

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro