CVE-2026-113481

The Media Library Assistant WordPress plugin versions before 3.44 is vulnerable to a Missing Authorization (CWE-862) flaw. The plugin fails to verify if a requesting user has permission to view a post before disclosing the taxonomy terms assigned to it. This allows any authenticated user , such a...

CVE-2026-113481 Media Library Assistant < 3.44 - Subscriber+ Missing Authorization via mla-fill-compat-fields

The Media Library Assistant WordPress plugin before 3.44 does not check that the requesting user is allowed to view a post before disclosing which taxonomy terms are assigned to it, allowing any authenticated user, such as a subscriber, to learn the term assignments of private attachments and pos...