{"id":"CVE-2022-4548","aliases":["EUVD-2022-51883","GHSA-436r-7p9m-wm47"],"status":"published","title":"Optimize images ALT Text (alt tag) \u0026 names for SEO using AI \u003c 2.0.8 - Settings Update via CSRF","description":"The Optimize images ALT Text \u0026 names for SEO using AI WordPress plugin before 2.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00335,"percentile":0.27166,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2023-01-23T14:31:47Z","modified":"2026-06-17T05:21:10Z","products":[{"vendor":"imageseo","product":"optimize_images_alt_text_\\(alt_tag\\)_\\\u0026_names_for_seo_using_ai"},{"vendor":"unknown","product":"optimize images alt text (alt tag) \u0026 names for seo using ai"}],"references":[{"url":"https://wpscan.com/vulnerability/0ff435bc-ea20-4993-98ae-1f61b1732b59","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4548"},{"url":"https://github.com/advisories/GHSA-436r-7p9m-wm47"}],"sources":{"cve":[{"id":"CVE-2022-4548","title":"Optimize images ALT Text (alt tag) \u0026 names for SEO using AI \u003c 2.0.8 - Settings Update via CSRF","description":"The Optimize images ALT Text \u0026 names for SEO using AI WordPress plugin before 2.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.","status":"published","published":"2023-01-23T14:31:47.111Z","modified":"2025-04-02T14:59:15.861Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:34:37.599536Z"}],"euvd":[{"id":"EUVD-2022-51883","description":"The Optimize images ALT Text \u0026 names for SEO using AI WordPress plugin before 2.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.","status":"published","published":"2023-01-23T14:31:47Z","modified":"2025-04-02T14:59:15Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:44.834568Z"}],"ghsa":[{"id":"GHSA-436r-7p9m-wm47","title":"The Optimize images ALT Text \u0026 names for SEO using AI WordPress plugin before 2.0.8 does not have...","description":"The Optimize images ALT Text \u0026 names for SEO using AI WordPress plugin before 2.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.","status":"published","published":"2023-01-23T15:30:32Z","modified":"2023-01-31T21:31:29Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:49:32.359752Z"}],"nvd":[{"id":"CVE-2022-4548","description":"The Optimize images ALT Text \u0026 names for SEO using AI WordPress plugin before 2.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.","status":"published","published":"2023-01-23T15:15:15.207Z","modified":"2026-06-17T05:21:10.07Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:07:35.157734Z"}]}}