Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Imagestowebp Project Component: Images To Webp Clear all filters
TI-2021-06927 CVE-2021-24644 · GHSA-4524-hxm7-m92p

Images to WebP < 1.9 - Authenticated Local File Inclusion

Priority MEDIUM 42

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05875 Published 2021-11-23 Fixed in 1.9 CWE-22
TI-2021-06924 CVE-2021-24641 · GHSA-7gcj-6xx8-443m

Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)

Priority LOW 36

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrar…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00537 Published 2021-11-23 Fixed in 1.9 CWE-352