File Reading Vulnerability in Media Library Assistant Plugin for WordPress

CVE-2025-11738

What is CVE-2025-11738?

The Media Library Assistant plugin for WordPress has a vulnerability that allows unauthenticated attackers to exploit the mla-stream-image.php file. This flaw enables attackers to read arbitrary files with extensions such as ai, eps, pdf, and ps stored on the server. If not addressed, this vulnerability may expose sensitive information that can compromise the security and integrity of affected WordPress installations.

References