SEO Friendly Images
SEO Friendly Images has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.
2 independent researchers contributed these findings, one record each. SEO Friendly Images is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.1.42.
CVE-2026-39665SEO Friendly Images <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

SEO Friendly Images
Author
Vladimir Prelovac
SEO Friendly Images is a WordPress SEO plugin which automatically updates all images with proper ALT and TITLE attributes for SEO purposes. If your images do not have ALT and TITLE already set, SEO Friendly Images will add them according the options you set. Additionally this makes the post W3C/xHTML valid as well. ALT attribute is important part of search engine optimization. It describes your images to search engine and when a user searches for a certain image this is a key determining factor for a match. TITLE attribute play lesser role but is important for visitors as this text will automatically appear in the tooltip when mouse is over the image. Plugin by Vladimir Prelovac. If you like what I do in WordPress, you will also like the ManageWP service. License This file is part of SEO Friendly Images. SEO Friendly Images is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. SEO Friendly Images is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with SEO Friendly Images. If not, see http://www.gnu.org/licenses/.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C