980 matches found
PT-2019-12563
Name of the Vulnerable Software and Affected Versions WhatsApp for Android versions prior to 2.19.143 WhatsApp for iOS versions prior to 2.19.100 Description An integer overflow in media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted...
WordPress WebP Express Plugin < 0.14.8 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113502";...
WordPress WebP Express Plugin < 0.14.11 Information Disclosure Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113503";...
WordPress webp-converter-for-media plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. webp-converter-for-media is a plugin that converts JPEG, PNG and GIF images to WebP format. A cross-site request forgery vulnerability...
WordPress webp-express plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. webp-express is a plugin that converts images from other formats to webp format. A cross-site scripting vulnerability exists in...
CVE-2019-15834
The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF...
CVE-2019-15837
The webp-express plugin before 0.14.8 for WordPress has stored XSS...
CVE-2019-15837
The webp-express plugin before 0.14.8 for WordPress has stored XSS...
Cross site request forgery (csrf)
The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF...
Cross site scripting
The webp-express plugin before 0.14.8 for WordPress has stored XSS...
CVE-2019-15837
The CVE-2019-15837 entry concerns the WordPress WebP Express Plugin before 0.14.8, which has a stored XSS vulnerability. Affected component: the WebP Express plugin for WordPress (versions prior to 0.14.8). Root cause: stored cross-site scripting enabling execution of client-side code in the cont...
CVE-2019-15837
The webp-express plugin before 0.14.8 for WordPress has stored XSS...
CVE-2019-15834
The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF...
CVE-2019-15834
The CVE-2019-15834 issue affects the WordPress WebP Converter for Media plugin before 1.0.3. The vulnerability is a Cross-Site Request Forgery (CSRF) in the plugin, as documented by multiple sources (CNVD-2019-30110, RH, NVD, CVE list). The underlying impact is that an attacker could coerce an au...
PT-2019-14423
Name of the Vulnerable Software and Affected Versions webp-converter-for-media plugin versions prior to 1.0.3 Description The issue concerns a CSRF problem in the webp-converter-for-media plugin for WordPress. Recommendations For versions prior to 1.0.3, update to version 1.0.3 or later to resolv...
CVE-2019-15837: Improper Neutralization of Input During Web Page Generation
The webp-express plugin before 0.14.8 for WordPress has stored XSS...
CVE-2019-15834: Cross-Site Request Forgery (CSRF)
The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF...
PT-2019-14426
Name of the Vulnerable Software and Affected Versions webp-express plugin versions prior to 0.14.8 Description The issue is related to stored XSS in the webp-express plugin for WordPress. Recommendations For versions prior to 0.14.8, update to version 0.14.8 or later to resolve the issue...
WordPress webp-express plugin information disclosure vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. webp-express is a plugin that converts images from other formats to webp format. An information disclosure vulnerability exists in the...