CVE-2022-4548: Optimize images ALT Text (alt tag) & names for SEO using AI < 2.0.8 - Settings Update via CSRF

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-01-23 · updated 2026-06-17
Weakness: CWE-352

Description

The Optimize images ALT Text & names for SEO using AI WordPress plugin before 2.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.

Affected products

Optimize images ALT Text (alt tag) & names for SEO using AI: before 2.0.8 — fixed in 2.0.8

How to fix

Upgrade to a fixed version: Optimize images ALT Text (alt tag) & names for SEO using AI 2.0.8. Check the vendor advisory for mitigations.

References

https://wpscan.com/vulnerability/0ff435bc-ea20-4993-98ae-1f61b1732b59
https://wpscan.com/vulnerability/0ff435bc-ea20-4993-98ae-1f61b1732b59

Get alerted when CVE-2022-4548 or the next vulnerability affects your stack