Missing Authorization Vulnerability in Media Library Assistant by David Lingren

CVE-2026-119491

What is CVE-2026-119491?

The Media Library Assistant plugin by David Lingren is susceptible to a missing authorization vulnerability, which arises from improperly configured access control security levels. This weakness may allow unauthorized users to exploit the access control mechanisms, potentially leading to sensitive data exposure and unauthorized actions within the media library. Affected versions range from n/a through 3.43. It's crucial for users of this plugin to ensure they have updated their installations and reviewed their access control settings to mitigate potential risks.

References