CVE-2026-61963

WordPress Media Library Assistant plugin ≤ 3.38 has an unauthenticated XSS vulnerability. The CVE and connected records describe unauthenticated cross-site scripting in versions up to 3.38. No root-cause, exploit details, or remediation are provided in the documents; further specifics on impact a...