CVE-2019-11927

CVE-2019-11927 is an integer overflow in WhatsApp media parsing libraries that enables a remote attacker to trigger an out-of-bounds write on the heap via specially crafted EXIF tags in WEBP images. Affected: WhatsApp for Android prior to 2.19.143 and WhatsApp for iOS prior to 2.19.100. Impact de...

WordPress WebP Express Plugin < 0.14.8 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113502";...

WordPress WebP Express Plugin < 0.14.11 Information Disclosure Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113503";...

WordPress webp-express plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. webp-express is a plugin that converts images from other formats to webp format. A cross-site scripting vulnerability exists in...

WordPress webp-converter-for-media plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. webp-converter-for-media is a plugin that converts JPEG, PNG and GIF images to WebP format. A cross-site request forgery vulnerability...

CVE-2019-15837

The webp-express plugin before 0.14.8 for WordPress has stored XSS...

CVE-2019-15834

The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF...

CVE-2019-15837

The webp-express plugin before 0.14.8 for WordPress has stored XSS...

Cross site scripting

The webp-express plugin before 0.14.8 for WordPress has stored XSS...

Cross site request forgery (csrf)

The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF...

CVE-2019-15837

The CVE-2019-15837 entry concerns the WordPress WebP Express Plugin before 0.14.8, which has a stored XSS vulnerability. Affected component: the WebP Express plugin for WordPress (versions prior to 0.14.8). Root cause: stored cross-site scripting enabling execution of client-side code in the cont...

CVE-2019-15837

The webp-express plugin before 0.14.8 for WordPress has stored XSS...

CVE-2019-15834

The CVE-2019-15834 issue affects the WordPress WebP Converter for Media plugin before 1.0.3. The vulnerability is a Cross-Site Request Forgery (CSRF) in the plugin, as documented by multiple sources (CNVD-2019-30110, RH, NVD, CVE list). The underlying impact is that an attacker could coerce an au...

CVE-2019-15834

The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF...

WordPress webp-express plugin information disclosure vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. webp-express is a plugin that converts images from other formats to webp format. An information disclosure vulnerability exists in the...

CVE-2019-15330

The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading...

CVE-2019-15330

The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading...

Design/Logic Flaw

The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading...

CVE-2019-15330

The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading...

CVE-2019-15330

The CVE concerns the WordPress plugin WebP Express (before version 0.14.11). It has insufficient protection against arbitrary file reading, enabling potential information disclosure. Affected component: webp-express plugin for WordPress; vulnerability arises from inadequate access controls around...