CRITICAL 9.1 CVE-2026-66600 Published 20 Aug 2026

Media Library Assistant Arbitrary File Upload

Worried this affects one of your servers?

Vulnerability in Media Library Assistant plugin (version <= 3.39) allows authors to upload arbitrary files.

Media Library Assistant plugin for WordPress is affected, which is used by website owners to manage media files.