← Back

Imagestowebp Project

imagestowebp_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Images To Webp
images_to_webp
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24644
1Imagestowebp Project
1Images To Webp
Jun 17, 2026
Nov 23, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue
CVE-2021-24641
1Imagestowebp Project
1Images To Webp
Jun 17, 2026
Nov 23, 2021
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrar...Show more
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversionShow less