Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08356
HistoryJan 26, 2022 - 12:00 a.m.

WordPress WebP Converter for Media plugin input validation error vulnerability

2022-01-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

43.5%

WordPress is the WordPress Foundation’s set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.The WordPress plugin WebP Converter for Media prior to version 4.0.3 is vulnerable to an input validation error, which stems from the fact that the WebP Media Converter for Media WordPress plugin contains A file (passthru.php) that does not validate the src parameter before redirecting users can be exploited to cause Open Redirect issues.

0.001 Low

EPSS

Percentile

43.5%