Read the docs

Imagestowebp Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Imagestowebp Project records in CISA KEV

No Imagestowebp Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Images To Webp 2 records MEDIUM

Records

2 records

TI-2021-06927 CVE-2021-24644 · GHSA-4524-hxm7-m92p

Images to WebP < 1.9 - Authenticated Local File Inclusion

Priority MEDIUM 42

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05875 Published 2021-11-23 Fixed in 1.9 CWE-22
TI-2021-06924 CVE-2021-24641 · GHSA-7gcj-6xx8-443m

Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)

Priority LOW 36

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrar…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00537 Published 2021-11-23 Fixed in 1.9 CWE-352
Open these records in search →