Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmalt_sc_div_update_alt_text' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-1820 The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmalt_sc_div_update_alt_text' shortcode in all ve… https://www.cve.org/CVERecord?id=CVE-2026-1820
Post summary
The post announces that the Media Library Alt Text Editor WordPress plugin contains a stored XSS flaw through a specific shortcode.
CVE-2026-1820 Stored XSS in WordPress Media Library Alt Text Editor Plugin <= 1.0.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1820
Post summary
The post announces a stored cross‑site scripting (XSS) vulnerability affecting WordPress Media Library Alt Text Editor Plugin versions up to 1.0.0, with no explicit PoC, exploit, or patch information provided.