Lucene search
+L

2 matches found

OSV
OSV
added 2021/11/23 8:15 p.m.4 views

CVE-2021-24641

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion...

8.1CVSS7.4AI score0.00519EPSS
SaveExploits2References1
Patchstack
Patchstack
added 2021/10/19 12:0 a.m.24 views

WordPress Image to WebP plugin <= 1.8 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities were discovered by apple502j in WordPress Image to WebP plugin versions = 1.8. Solution Update the WordPress Image to WebP plugin to the latest available version at least 1.9...

8.1CVSS2.8AI score0.00519EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder