Unrated severityNVD Advisory· Published Nov 1, 2026

CVE-2026-113482

Description

The Media Library Assistant WordPress plugin before 3.44 does not escape one of its shortcode attributes before outputting it in an attribute of generated links, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Media Library Assistantllm-fuzzy
Range: <3.44
Package: https://wordpress.org/plugins/media-library-assistant

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/b01e935e-94ea-4993-8e49-2882f594bd54/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000