CVE-2019-15834

The CVE-2019-15834 issue affects the WordPress WebP Converter for Media plugin before 1.0.3. The vulnerability is a Cross-Site Request Forgery (CSRF) in the plugin, as documented by multiple sources (CNVD-2019-30110, RH, NVD, CVE list). The underlying impact is that an attacker could coerce an au...

CVE-2021-25074

The CVE-2021-25074 entry refers to the WordPress WebP Converter for Media plugin prior to version 4.0.3, where the passthru.php file does not validate the src parameter before redirecting, causing an Unauthenticated Open Redirect. The vulnerability affects the plugin’s WordPress integration and c...