Home / Vulnerability Intelligence / CVE-2026-32399

CVE-2026-32399 - Vulnerability Analysis

HighCVSS: 8.5

Last Updated: March 13, 2026

David Lingren Media Library Assistant - SQL Injection

Published: March 13, 2026Updated: March 13, 2026Remote Exploitable

Overview

David Lingren Media Library Assistant <= 3.32 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted SQL input.

Severity & Score

Severity: High

CVSS Score: 8.5

EPSS Score: 2.1%(Probability of exploitation in next 30 days)

Impact

Attackers can execute arbitrary SQL queries, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version beyond 3.32.

References

https://patchstack.com/database/Wordpress/Plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-32-sql-injection-vulnerability?_s_id=cve

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Mar 13, 2026

🟠 CVE-2026-32399 - High (8.5) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a thr... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32399/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Mar 13, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-32399
Severity: High
CVSS Score: 8.5
Type: sql_injection
Status: new
EPSS: 2.1%
Social Posts: 2

CWE

CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

EPSS Score

2.1%Probability of exploitation in the next 30 days