CVE-2021-25074 WebP Converter for Media < 4.0.3 - Unauthenticated Open redirect

The WebP Converter for Media WordPress plugin before 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue...

CVE-2021-25074

The CVE-2021-25074 entry refers to the WordPress WebP Converter for Media plugin prior to version 4.0.3, where the passthru.php file does not validate the src parameter before redirecting, causing an Unauthenticated Open Redirect. The vulnerability affects the plugin’s WordPress integration and c...

WordPress plugin 输入验证错误漏洞

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.The WordPress plugin WebP Converter for Media prior to version 4.0.3 is vulnerable to an input validation...

PT-2022-9630

Name of the Vulnerable Software and Affected Versions WebP Converter for Media WordPress plugin versions prior to 4.0.3 Description The issue arises from a file named passthru.php that fails to validate the src parameter before redirecting the user to it, resulting in an Open Redirect issue...

CVE-2021-25074: URL Redirection to Untrusted Site

The WebP Converter for Media WordPress plugin before 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue...

CVE-2021-46104

An issue was discovered in webpservergo 0.4.0. There is a directory traversal vulnerability that can read arbitrary file information on the server...

Webp_Server_Go 路径遍历漏洞

WebpServerGo is a Go version of WebP Server. It is used to instantly compress Jpg/Png into WebP format. A path traversal vulnerability exists in WebpServerGo version 0.4.0, which stems from a lack of filtering and escaping of directory special characters in the software, resulting in a directory...

PT-2022-12568

Name of the Vulnerable Software and Affected Versions webp server go version 0.4.0 Description An issue was discovered in the software, which is a directory traversal vulnerability that can read arbitrary file information on the server. Recommendations For webp server go version 0.4.0, consider...

WordPress WebP Converter for Media plugin <= 4.0.2 - Unauthenticated Open redirect vulnerability

Unauthenticated Open redirect vulnerability discovered by Krzysztof Zając in WordPress WebP Converter for Media plugin versions = 4.0.2. Solution Update the WordPress WebP Converter for Media plugin to the latest available version at least 4.0.3...

WebP Converter for Media < 4.0.3 - Unauthenticated Open redirect

The plugin contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue https://example.com/wp-content/plugins/webp-converter-for-media/includes/passthru.php?src=https://wpscan.com...

ROS-2-2215

2.2215 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

ROS-2-1352

2.1352 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

ImageIO Code Execution

The vulnerability of the ImageIO component in operating systems such as tvOS, iOS, iPadOS, and watchOS relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious WEBP file...

CVE-2021-24641

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion...

CVE-2021-24644

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...

CVE-2021-24641

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion...

CVE-2021-24644

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...

Design/Logic Flaw

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...

EUVD-2021-11556

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include function, which could lead to a Local File Inclusion issue...

CVE-2021-24644

The Images to WebP WordPress plugin (versions before 1.9 ) is vulnerable to an Authenticated Local File Inclusion (LFI) issue. The root cause is the failure to validate or sanitize the tab parameter before passing it to the include() function. An authenticated attacker can exploit this via path t...