CVE-2025-15019

Name of the Vulnerable Software and Affected Versions BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce plugin for WordPress versions up to and including 2.2.1

Description The BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting. The issue is due to insufficient input sanitization and output escaping in the bialty cs alt post meta. Authenticated attackers with contributor level access or higher can inject arbitrary web scripts into pages. These scripts will execute when an administrator accesses the post editor.

Recommendations Update the BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce plugin for WordPress to a version later than 2.2.1.