6 matches found
CVE-2021-25074: URL Redirection to Untrusted Site
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue...
PT-2022-9630
Name of the Vulnerable Software and Affected Versions WebP Converter for Media WordPress plugin versions prior to 4.0.3 Description The issue arises from a file named passthru.php that fails to validate the src parameter before redirecting the user to it, resulting in an Open Redirect issue...
Cross site request forgery (csrf)
The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF...
CVE-2019-15834
The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF...
PT-2019-14423
Name of the Vulnerable Software and Affected Versions webp-converter-for-media plugin versions prior to 1.0.3 Description The issue concerns a CSRF problem in the webp-converter-for-media plugin for WordPress. Recommendations For versions prior to 1.0.3, update to version 1.0.3 or later to resolv...