Image Alt Text [image-alt-text] < 3.0.0
unknown
[en] The Image Alt Text plugin for WordPress is vulnerable to unauthorized modification of data| due to a missing capability check on the iat_add_alt_txt_action and iat_update_alt_txt_action AJAX actions in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with subscriber-lev...
- Affected:
- up to 3.0.0
- Fixed in:
- 3.0.0
- Disclosed:
- Nov 28, 2024
CVE-2024-11918 on NVD →
Image Alt Text <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Image Alt Text Update
medium
The Image Alt Text plugin for WordPress is vulnerable to unauthorized modification of data| due to a missing capability check on the iat_add_alt_txt_action and iat_update_alt_txt_action AJAX actions in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with subscriber-level ac...
- CVSS:
- 4.3
- Affected:
- up to 2.0.0
- Fixed in:
- 3.0.0
- Disclosed:
- Nov 27, 2024
CVE-2024-11918 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database