Images to WebP < 1.9 - Authenticated Local File Inclusion

The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...

CVE-2021-24644

creationtimestamp| type| source ---|---|--- 2025-09-11 13:37:27+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24644.yaml 2025-09-16 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lyy7rtsuy327...