CVE-2026-91108

Medium · CVSS 4.3 (NVD) · fetched 2026-10-24

The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.10.41. This is due to the plugin not properly verifying that a user is authorized to perform an action.

Remediation

Apply the updates and mitigations in the source advisory; if no fix is available, follow the advisory's guidance on restricting or discontinuing use.

Affected PHP branches

See the source advisory.

Check your site

Source: NIST National Vulnerability Database (NVD) · retrieved 2026-10-24T13:48:10-04:00 · https://nvd.nist.gov/vuln/detail/CVE-2026-91108

← All threats