CVE-2026-3722: Improper Neutralization of Input During Web Page Generation

The Auto Image Attributes From Filename With Bulk Updater Add Alt Text, Image Title For Image SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment metadata in all versions up to, and including, 4.9 due to insufficient input sanitization and output escaping. Thi...

WordPress plugin Image Alt Text 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exis...

PT-2024-16309

Name of the Vulnerable Software and Affected Versions The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin versions prior to 1.5.0 Description The issue concerns the failure to sanitise uploaded SVG files, potentially allowing users with a role as lo...

CVE-2024-10482: Improper Neutralization of Input During Web Page Generation

The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before 1.5.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...