CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Webp Converter For Media Project 1Webp Converter For Media Jun 17, 2026 Jan 24, 2022 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue |
1Webp Converter For Media Project 1Webp Converter For Media Jun 17, 2026 Aug 30, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF. |