The vulnerability CVE-2026-24579 in the WP Messiah Ai Image Alt Text Generator for WordPress plugin arises from missing authorization controls. This flaw allows users with limited privileges (PR:L) to perform actions without proper permission checks, potentially leading to integrity violations. The CVSS score is 4.3 (medium), with network attack vector, low attack complexity, no user interaction required, and no impact on confidentiality or availability. The affected versions include all up to 1.1.9. No patch or vendor advisory is currently available to confirm remediation status.

Exploitation of this vulnerability could allow a user with limited privileges to perform unauthorized actions within the plugin, potentially modifying data or settings. There is no impact on confidentiality or availability, but integrity could be compromised. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict plugin access to trusted users only and monitor for unusual activity related to the plugin. Avoid granting unnecessary privileges to users who can interact with this plugin.