Lucene search
+L

35 matches found

NVD
NVD
•added 2026/11/03 5:18 a.m.•12 views

CVE-2026-120578

The AI Alt Text Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to modify the alt...

5.3CVSS0.00255EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/11/03 4:43 a.m.•24 views

CVE-2026-120578 AI Alt Text Generator <= 2.7.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'post_id' Parameter

The AI Alt Text Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to modify the alt...

5.3CVSS0.00255EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/11/03 4:43 a.m.•9 views

WordPress AI Alt Text Generator plugin <= 2.7.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Modification vulnerability

Missing Authorization to Unauthenticated Arbitrary Attachment Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin AI Alt Text Generator versions = 2.7.0...

5.3CVSS5.9AI score0.00255EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/11/03 4:43 a.m.•8 views

EUVD-2026-115673

The AI Alt Text Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to modify the alt...

5.3CVSS6.2AI score0.00255EPSS
SaveExploits0References5
CVE
CVE
•added 2026/11/03 4:43 a.m.•12 views

CVE-2026-120578

The AI Alt Text Generator plugin for WordPress (versions up to and including 2.7.0 ) is vulnerable to an authorization bypass due to insufficient verification of user permissions. This flaw allows unauthenticated attackers to modify the alt text , and potentially the title , caption , and descrip...

5.3CVSS6.2AI score0.00255EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/10/27 3:44 p.m.•13 views

WordPress AI Alt Text Generator plugin <= 2.7.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'post_id' Parameter vulnerability

Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'postid' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin AI Alt Text Generator versions = 2.7.0...

5.9AI score
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/01/23 2:28 p.m.•51 views

CVE-2026-24579 WordPress Ai Image Alt Text Generator for WP plugin <= 1.1.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through = 1.1.9...

4.3CVSS0.0022EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•7 views

CVE-2026-24579: Missing Authorization

Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through = 1.1.9...

4.3CVSS6AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/13 7:43 a.m.•17 views

CVE-2025-12113

The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the atgaideleteapikey function in all versions up to, and including, 1.8.3. This makes it possible for authenticated...

4.3CVSS5AI score0.00195EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/12 9:30 a.m.•23 views

EUVD-2025-119993

The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the atgaideleteapikey function in all versions up to, and including, 1.8.3. This makes it possible for authenticated...

4.3CVSS4.7AI score0.00195EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/12 7:27 a.m.•34 views

CVE-2025-12113

CVE-2025-12113 affects the WordPress plugin “Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images” (versions

4.3CVSS5.8AI score0.00195EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/12 7:27 a.m.•11 views

CVE-2025-12113 Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images <= 1.8.3 - Missing Authorization to Authenticated (Subscriber+) API Key Deletion

The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the atgaideleteapikey function in all versions up to, and including, 1.8.3. This makes it possible for authenticated...

4.3CVSS5.8AI score0.00195EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/11/12 4:02 a.m.•22 views

WordPress Alt Text Generator AI plugin <= 1.8.3 - Missing Authorization to Authenticated (Subscriber+) API Key Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ API Key Deletion vulnerability discovered by Legion Hunter in WordPress Plugin Alt Text Generator AI versions = 1.8.3...

4.3CVSS6.9AI score0.00195EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•29 views

WordPress plugin Alt Text Generator AI – Automatically generates and updates alt texts for images. Security vulnerabilities.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00195EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•8 views

CVE-2025-12113: Missing Authorization

The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the atgaideleteapikey function in all versions up to, and including, 1.8.3. This makes it possible for authenticated...

4.3CVSS5.8AI score0.00195EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/06 4:15 p.m.•17 views

CVE-2025-58207

Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through = 1.1.5...

8.2CVSS0.00353EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•8 views

CVE-2025-58207: Missing Authorization

Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through = 1.1.5...

8.2CVSS6AI score0.00353EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-9813

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00495EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-10451

Malicious code in bioql PyPI...

4.3CVSS6.1AI score0.00299EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 9:28 a.m.•27 views

CVE-2024-12177

The Ai Image Alt Text Generator for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

6.1CVSS8.5AI score0.004EPSS
SaveExploits0References1
Rows per page
Query Builder