Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: alttextai Clear all filters
TI-2026-20466 CVE-2026-25348 · GHSA-hm7p-gwh2-3jfm

WordPress Download Alt Text AI plugin <= 1.10.15 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in alttextai Download Alt Text AI alttext-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Alt Text AI: from n/a through <= 1.10.1…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00322 Published 2026-02-19 No fix listed CWE-862
TI-2024-04510 CVE-2024-4847 · GHSA-mgc5-fh63-4wc7

SQL injection in alttextai Alt Text AI – Automatically generate image alt text for SEO…

Priority MEDIUM 41

The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to generic SQL Injection via the ‘last_post_id’ parameter in all versions up to, and including, 1.4.9 d…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00612 Published 2024-05-15 No fix listed CWE-89
TI-2024-22706 CVE-2024-34366 · GHSA-x8pq-qq4m-4ffg

WordPress AltText.ai plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AltText.Ai Download Alt Text AI allows Stored XSS.This issue affects Download Alt Text AI: from n/a through 1.3.4.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00359 Published 2024-05-06 No fix listed CWE-79