plugin

Image Alt Text Vulnerabilities

2 known security issues reported for the Image Alt Text WordPress plugin. Most recent disclosed Nov 28, 2024.

1 medium

Running Image Alt Text on your site? Check whether your installed version is affected.

Scan your site free

Image Alt Text [image-alt-text] < 3.0.0

unknown

[en] The Image Alt Text plugin for WordPress is vulnerable to unauthorized modification of data| due to a missing capability check on the iat_add_alt_txt_action and iat_update_alt_txt_action AJAX actions in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with subscriber-lev...

Affected:
up to 3.0.0
Fixed in:
3.0.0
Disclosed:
Nov 28, 2024

CVE-2024-11918 on NVD →

Image Alt Text <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Image Alt Text Update

medium

The Image Alt Text plugin for WordPress is vulnerable to unauthorized modification of data| due to a missing capability check on the iat_add_alt_txt_action and iat_update_alt_txt_action AJAX actions in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with subscriber-level ac...

CVSS:
4.3
Affected:
up to 2.0.0
Fixed in:
3.0.0
Disclosed:
Nov 27, 2024

CVE-2024-11918 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database