Alt Text AI CVE-2026-91108

Requires an authenticated WordPress account at subscriber level or above (PR:L) on a site running Alt Text AI ≤1.10.41; practically this means the target site allows user registration or the attacker otherwise holds any low-privileged account. No special plugin configuration is needed beyond the plugin being active. The limiting factor is the authentication requirement - anonymous visitors cannot exploit it - but that barrier is weak because the CSRF nonce needed for the action is emitted on /wp-admin/profile.php, a page every Subscriber can access, so any logged-in user can obtain it trivially. No user interaction by a victim and no non-default settings are required.

This is a genuine but low-severity (CVSS 4.3) issue that should be triaged below critical/high findings, not a top-priority emergency. All signals align on limited impact: the CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) shows network reach with low complexity but requires authentication (PR:L - subscriber-level) and yields only partial integrity impact with no confidentiality or availability loss. The CWE-862 (Missing Authorization) classification is consistent with the description. There is no KEV listing and no public exploit identified, so exploitation status is 'no public exploit identified at time of analysis.' No EPSS score and no SSVC decision data were provided in the input, so probability-of-exploitation and automatable/technical-impact framework signals cannot be weighed - this is a data gap, not evidence of low risk. The one aggravating detail Wordfence documents is that the required nonce is emitted on /wp-admin/profile.php (reachable by Subscribers), which collapses the practical barrier to exploitation for anyone who already holds a low-privileged account. Net: real and worth patching, especially on sites allowing open/subscriber registration, but the authentication requirement and integrity-only impact keep real-world risk moderate rather than severe.

On a WordPress site that permits self-service subscriber registration, an attacker registers a low-privileged account, loads /wp-admin/profile.php to harvest the exposed nonce, and invokes the plugin's unprotected action to overwrite the post_content of arbitrary posts or pages with LLM-generated text steered by attacker-chosen keywords. This enables black-hat SEO injection into content the attacker does not own and burns through the site owner's paid AltText.ai API credits. No public exploit code is identified at time of analysis, and the attack requires an authenticated session (PR:L) but no user interaction and only low complexity.