CVE-2026-34885

HighCVSS 8.5/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant allows SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.34.

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Apr 6, 2026
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-348867.5Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions.CVE-2026-348876.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder al CVE-2026-348887.5Unauthenticated Sensitive Data Exposure in Bricksforge <= 3.1.8.4 versions.CVE-2026-348896.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for W CVE-2026-34897.5The DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress is vulnerable to SQL Injection via the 'packages' par CVE-2026-348906.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark O’Donnell MSTW League Manager all CVE-2026-348917.5Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce <= 2.2.5 versions.CVE-2026-348926.5Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions.CVE-2026-348938.1Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.CVE-2026-348948.1Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.CVE-2026-348958.1Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions.CVE-2026-348967.5Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Fo