AI Alt Text CVE-2026-120578

Requires a Contributor-level account on the target WordPress site to retrieve a valid nonce from the page source of post.php, post-new.php, or upload.php; with that nonce an attacker can modify the alt text of arbitrary attachments owned by other users. Overwriting post_title, post_excerpt, and post_content (the title, caption, and description) additionally requires the plugin's set_title, set_caption, or set_description options to be enabled - a non-default dependency that limits the broader-impact variant. The limiting factors are therefore the need for at least Contributor privileges and, for the extended metadata write, specific plugin configuration being turned on; impact is confined to attachment metadata integrity.

This is a medium-severity (CVSS 5.3) missing-authorization flaw (CWE-862) whose real-world risk is modest. The signals conflict in one important way: the supplied CVSS vector is AV:N/AC:L/PR:N/UI:N (network, no privileges, unauthenticated), yet the description explicitly states that exploitation requires a Contributor-level account to retrieve the nonce from the page source of post.php, post-new.php, or upload.php - so the 'unauthenticated' labeling in the vector contradicts the stated prerequisite and should be verified against Wordfence's advisory; a Contributor account is a low but non-zero privilege, pointing to PR:L rather than PR:N. Impact is intentionally narrow: C:N/I:L/A:N, i.e. limited integrity only - an attacker can alter the alt text (and, where specific plugin options are enabled, the title, caption, and description) of attachments owned by other users, with no confidentiality or availability effect and no code execution. No EPSS score, no CISA KEV listing, and no public exploit were provided in the input; the vuln.today decision label is 'this_month' (not act_now/emergency). Taken together, this is a legitimate but low-urgency integrity/data-tampering issue - a defacement/metadata-manipulation vector rather than a high-priority RCE - and should be patched on a routine cadence rather than treated as an emergency.

An attacker who holds or registers a Contributor-level account on a WordPress site running AI Alt Text Generator ≤2.7.0 loads post.php, post-new.php, or upload.php to scrape a valid nonce, then issues a crafted request to overwrite the alt text of media attachments belonging to other users; if the plugin's set_title, set_caption, or set_description options are enabled, they can also overwrite those attachments' title, caption, and description. No public exploit code was identified at the time of analysis, and the attack causes limited integrity impact (metadata tampering) rather than code execution or data disclosure.