{"id":"CVE-2026-115948","kind":"vulnerability","aliases":["CVE-2026-115948"],"related":[],"title":"Media Library Assistant WordPress plugin: blind SQL injection through version 3.42","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.42.","summary":"The media-library-assistant WordPress plugin by David Lingren does not neutralize input used in an SQL command, enabling blind SQL injection. An attacker can read database contents one inference step at a time, which can expose site data such as user records and password hashes.","severity":"high","cvss":8.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","self-hosted","wordpress","wordpress-plugin"],"not_affected_if":["plugin-deactivated","plugin-not-installed"],"how_to_check":"- Check the installed plugin version in the WordPress admin under Plugins, or with `wp plugin get media-library-assistant --field=version`\n- Confirm whether the plugin is active on the site","fix":"- Update media-library-assistant to a version later than `3.42`, as released by the vendor\n- Until patched, deactivate the plugin if it is not essential","status":"open","published_at":"2026-10-26T11:16:35+00:00","first_seen_at":"2026-10-26T11:29:40+00:00","triaged_at":"2026-10-26T11:30:56+00:00","updated_at":"2026-10-26T11:30:56+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-26T11:30:56Z","model":"claude-haiku-5-5","output":{"fix":"- Update media-library-assistant to a version later than `3.42`, as released by the vendor\n- Until patched, deactivate the plugin if it is not essential","reach":"internet","title":"Media Library Assistant WordPress plugin: blind SQL injection through version 3.42","impact":"medium","summary":"The media-library-assistant WordPress plugin by David Lingren does not neutralize input used in an SQL command, enabling blind SQL injection. An attacker can read database contents one inference step at a time, which can expose site data such as user records and password hashes.","category":"package","nicknames":[],"who_cares":["wordpress","wordpress-plugin","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker reads database contents, including user credentials, via SQL queries","analyst_note":"Confirm the fixed version and whether unauthenticated access is required; check the plugin's changelog or the Wordfence/WPScan entry for CVE-2026-115948.","how_to_check":"- Check the installed plugin version in the WordPress admin under Plugins, or with `wp plugin get media-library-assistant --field=version`\n- Confirm whether the plugin is active on the site","needs_analyst":true,"not_affected_if":["plugin-not-installed","plugin-deactivated"],"who_is_affected":"WordPress sites running media-library-assistant at version 3.42 or earlier are exposed. The flaw is reachable through the plugin's own request handling, so any site with the plugin active should be checked. Sites without the plugin installed, or with it deactivated, are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000624,"input_tokens":3321,"output_tokens":584,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-115948':14A,17A '-2026':13A,16A '3.42':11A,108C 'affect':101C 'allow':96C 'assist':3A,30B,91C,95C,104C 'attack':50B 'blind':6A,46B,97C 'command':44B,82C 'content':54B 'cve':12A,15A 'data':65B 'databas':53B 'david':34B,87C 'element':77C 'enabl':45B 'expos':63B 'hash':72B 'host':21B 'improp':73C 'infer':56B 'inject':8A,48B,84C 'injection.this':99C 'input':39B 'issu':100C 'librari':2A,29B,90C,94C,103C 'lingren':35B,88C 'media':1A,28B,89C,93C,102C 'media-library-assist':27B,92C 'n/a':106C 'neutral':38B,74C 'one':55B 'packag':18B 'password':71B 'plugin':5A,25B,32B 'read':52B 'record':69B 'self':20B 'self-host':19B 'site':64B 'special':76C 'sql':7A,43B,47B,81C,83C,98C 'step':57B 'time':60B 'use':40B,78C 'user':68B 'version':10A 'vulner':85C 'wordpress':4A,22B,24B,31B 'wordpress-plugin':23B","nicknames":[],"mitigations":[],"who_affected":"WordPress sites running media-library-assistant at version 3.42 or earlier are exposed. The flaw is reachable through the plugin's own request handling, so any site with the plugin active should be checked. Sites without the plugin installed, or with it deactivated, are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T11:16:35+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115948","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115948","severity":null,"published_at":"2026-10-26T11:16:35+00:00","modified_at":"2026-10-26T11:16:35+00:00","first_seen_at":"2026-10-26T11:29:40+00:00","fetched_at":"2026-10-26T11:29:40+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}