CVE Catalog
CVE-2026-66600
CriticalCVSS 9.1Summary
Author Arbitrary File Upload vulnerability in Media Library Assistant versions up to 3.39. A user with author role can upload malicious files.
Risk Assessment
Risk of executing malicious code on the server, which can lead to site takeover.
Recommendation
Update the Media Library Assistant plugin to the latest version that includes the security fix.
Original NVD description (English source)
Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions.