https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 09:32:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-357297 EUVD-2026-357297 https://cve.radiocsirt.org/vuln/euvd-2026-357297 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16959 <p>The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection.</p> <p>The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16959 https://cve.radiocsirt.org/vuln/ghsa-qg9r-vw9x-vfr5 <p>The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection.</p> <p>The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection.</p> https://cve.radiocsirt.org/vuln/ghsa-qg9r-vw9x-vfr5