https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 08:40:28 +0000 https://db.gcve.eu/vuln/cve-2026-113485 <p><strong>Affected:</strong> Unknown Media Library Assistant</p> <p>The Media Library Assistant WordPress plugin before 3.42 does not consistently validate its CSRF nonce on the Media Library bulk-action handler, checking the nonce only when its field is present, so a forged request that omits the field can cause a logged-in user with the Author role or above to trash or delete attachments.</p> <p><strong>Affected:</strong> Unknown Media Library Assistant</p> <p>The Media Library Assistant WordPress plugin before 3.42 does not consistently validate its CSRF nonce on the Media Library bulk-action handler, checking the nonce only when its field is present, so a forged request that omits the field can cause a logged-in user with the Author role or above to trash or delete attachments.</p> https://db.gcve.eu/vuln/cve-2026-113485