CVE-2025-15158

CVE-2025-15158 is a WordPress WP Enable WebP vulnerability. The Wordfence entry confirms an authenticated arbitrary file upload due to improper file-type validation in wpse_file_and_ext_webp, affecting WP Enable WebP

PT-2026-1600

Name of the Vulnerable Software and Affected Versions WP Enable WebP versions up to and including 1.0 Description The WP Enable WebP plugin for WordPress has a flaw allowing unauthorized file uploads. This is due to insufficient file type validation within the wpse file and ext webp function...