CVE

CVE-2026-6641 — Media Library Assistant < 3.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-6641 Media Library Assistant < 3.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mla_link_href' Shortcode Parameter — Unknown < 3.36 3.36 — —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.