CVE-2026-66600

The Media Library Assistant plugin versions up to 3.39 are vulnerable to an arbitrary file upload flaw, allowing attackers to upload malicious files to the server. This critical vulnerability could lead to remote code execution, compromising the integrity and confidentiality of the affected systems. Organizations using this plugin should prioritize immediate updates or mitigations to safeguard against potential exploitation.