Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
roselldk records in CISA KEVNo roselldk vulnerabilities are listed in CISA KEV.
Priority LOW 30
The WebP Express plugin for WordPress is vulnerable to information exposure via config files in all versions up to, and including, 0.25.9.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00332 · Published 2025-12-04 · No fix listed CWE-200
Open these records in search →