CVE-2021-24641CWE-352

CVE-2021-24641: vulnerability in Images to WebP

Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion
Affected products
Unknown · Images to WebP
Related CVEs — Images to WebP

In the same product, most dangerous first.