PT-2026-31227 · WordPress · Pb Seo Friendly Images

Published 2026-04-08 · Updated 2026-04-12 · CVE-2026-39665

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Vladimir Prelovac SEO Friendly Images versions through 3.0.5

Description SEO Friendly Images is susceptible to a DOM-Based Cross-site Scripting issue due to improper input neutralization during web page generation. This allows for the execution of malicious scripts within the context of the user's browser. The vulnerability is triggered by manipulating input data during the generation of web pages.

Recommendations Update SEO Friendly Images to a version greater than 3.0.5.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-39665

Affected Products

Pb Seo Friendly Images

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-39665 · Security Note
• https://twitter.com/CVEnew/status/2043295734674436194 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/seo-image/vulnerability/wordpress-seo-friendly-images-plugin-3-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve · Note