Webp Converter For Media Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Webp Converter For Media Project records in CISA KEV

No Webp Converter For Media Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Webp Converter For Media 2 records LOW

Records

2 records

TI-2019-11901 CVE-2019-15834 · GHSA-mh34-vf54-5m97

The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.

LOW 39

The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00709 Published 2019-08-30 No fix listed CWE-352

TI-2021-07352 CVE-2021-25074 · GHSA-4wcp-h664-5xc6

WebP Converter for Media < 4.0.3 - Unauthenticated Open redirect

LOW 31

The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02161 Published 2022-01-24 Fixed in 4.0.3 CWE-601

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0