Images to WebP < 1.9 - Authenticated Local File Inclusion

The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...

CVE-2026-24644

creationtimestamp| type| source ---|---|--- 2026-01-24 07:03:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md5njxs44m2h...

PT-2026-4762

CVE-2026-24644 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2026-24644 Published : Jan. 24, 2026, 4:15 a.m. | 1 hour, 8 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2021-24644

creationtimestamp| type| source ---|---|--- 2025-09-11 13:37:27+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24644.yaml 2025-09-16 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lyy7rtsuy327...

CVE-2021-24644

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...

CVE-2025-24644

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels print-invoices-packing-slip-labels-for-woocommerce allows Stored XSS.This issue affects WooCommerce PDF Invoice...

CVE-2025-24644

CVE-2025-24644 affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels (WebToffee) versions up to 4.7.1. Root cause: improper neutralization of input during web page generation, enabling stored XSS. Public references indicate remediation to version 4.7.2 (update requir...

CVE-2025-24644 WordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels print-invoices-packing-slip-labels-for-woocommerce allows Stored XSS.This issue affects WooCommerce PDF Invoice...

CVE-2025-24644 WordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels print-invoices-packing-slip-labels-for-woocommerce allows Stored XSS.This issue affects WooCommerce PDF Invoice...

CVE-2022-24644

creationtimestamp| type| source ---|---|--- 2022-06-02 07:35:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2370 2023-01-14 12:57:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7548 2023-01-15 14:05:50+00:00| published-proof-of-concept|...

CVE-2022-24644

ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse...

CVE-2022-24644

ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse...

CVE-2022-24644

CVE-2022-24644 affects ZZ Inc. KeyMouse Windows 3.08 and earlier. The vulnerability is a remote code execution that can be triggered when an affected KeyMouse installation performs an unauthenticated update. The root cause is tied to the update process, and exploitation requires triggering a prod...

Exploit for Download of Code Without Integrity Check in Zzinc Keymouse_Firmware

CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticat...

CVE-2021-24644

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...

CVE-2021-24644

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...

CVE-2021-24644

CVE-2021-24644 affects the Images to WebP WordPress plugin (versions prior to 1.9). The root cause is that the tab parameter is not validated/sanitized before being passed to include(), enabling Local File Inclusion. Exploitation context in connected data indicates an authenticated LFI scenario, ...

CVE-2021-24644 Images to WebP < 1.9 - Authenticated Local File Inclusion

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...

CVE-2026-24644

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2020-24644

CVE-2020-24644 entry is rejected/not used; not an active vulnerability entry as stated.