ai_alt_text_generator vulnerabilities

CVEs whose affected-version data names the ai_alt_text_generator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120578Medium· 5.3

5d ago

AI Alt Text Generator <= 2.7.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Modification via 'post_id' Parameter

The AI Alt Text Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.7.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes…

▾ Sunlitmigkapa · AI Alt Text GeneratorEPSS 0.26%via CVEORG