Lucene search
+L

6 matches found

NVD
NVD
•added 2026/11/03 5:18 a.m.•8 views

CVE-2026-120578

The AI Alt Text Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to modify the alt...

5.3CVSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/11/03 4:43 a.m.•8 views

CVE-2026-120578 AI Alt Text Generator <= 2.7.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'post_id' Parameter

The AI Alt Text Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to modify the alt...

5.3CVSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/11/03 4:43 a.m.•4 views

WordPress AI Alt Text Generator plugin <= 2.7.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Modification vulnerability

Missing Authorization to Unauthenticated Arbitrary Attachment Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin AI Alt Text Generator versions = 2.7.0...

5.3CVSS5.9AI score
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/11/03 4:43 a.m.•9 views

CVE-2026-120578

The AI Alt Text Generator plugin for WordPress (versions up to and including 2.7.0 ) is vulnerable to an authorization bypass due to insufficient verification of user permissions. This flaw allows unauthenticated attackers to modify the alt text , and potentially the title , caption , and descrip...

5.3CVSS6.2AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/11/03 4:43 a.m.•5 views

EUVD-2026-115673

The AI Alt Text Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to modify the alt...

5.3CVSS6.2AI score
SaveExploits0References5
Patchstack
Patchstack
•added 2026/10/27 3:44 p.m.•13 views

WordPress AI Alt Text Generator plugin <= 2.7.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'post_id' Parameter vulnerability

Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'postid' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin AI Alt Text Generator versions = 2.7.0...

5.9AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder