WordPress plugin BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce 跨站脚本漏洞

🗓️ 09 Jan 2026 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 2 Views

BIALTY plugin for WordPress has cross-site scripting in v2.2.1 and earlier from input cleanup flaws.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-15019	9 Jan 202608:02	–	circl
CVE	CVE-2025-15019	9 Jan 202606:34	–	cve
Cvelist	CVE-2025-15019 BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	9 Jan 202606:34	–	cvelist
EUVD	EUVD-2026-1791	9 Jan 202606:34	–	euvd
NVD	CVE-2025-15019	9 Jan 202607:16	–	nvd
Patchstack	WordPress BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce plugin <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability	8 Jan 202622:41	–	patchstack
Positive Technologies	PT-2026-1764	9 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-15019	13 Jan 202622:53	–	redhatcve
Vulnrichment	CVE-2025-15019 BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	9 Jan 202606:34	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (January 5, 2026 to January 11, 2026)	15 Jan 202616:14	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/0af219a7-6596-47b2-ab8e-a71f20218759
plugins	www.plugins.trac.wordpress.org/changeset/3431985/bulk-image-alt-text-with-yoast/trunk/admin/views/metabox.view.php
access	www.access.redhat.com/security/cve/cve-2025-15019

28 May 2026 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.16.4

EPSS0.00008

SSVC

cross site scripting bialty plugin wordpress plugin yoast seo woocommerce input validation flaw