CVE-2026-32399

CVE-2026-32399 is a blind SQL injection vulnerability found in the David Lingren Media Library Assistant plugin, affecting versions up to and including 3.32. Rated 8.5 HIGH, this flaw allows a remote attacker with low privileges to execute SQL commands with low attack complexity. Successful exploitation primarily leads to a high impact on confidentiality, potentially allowing sensitive data exfiltration from the database. There is currently no evidence of active exploitation, public exploit code, or significant community discussion regarding this vulnerability. The probability of exploitation within the next 30 days is very low.