CVE

CVE-2026-6640 — Media Library Assistant < 3.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-6640 Media Library Assistant < 3.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter — Unknown < 3.36 3.36 — —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.