CVE-2021-24644: vulnerability in Images to WebP
Images to WebP < 1.9 - Authenticated Local File Inclusion
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
40Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 5.9%
from disclosure to weapon
Published on NVDNov 23
VulnCheckOct 19
The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue
Affected products
Unknown · Images to WebPRelated CVEs — Images to WebP
In the same product, most dangerous first.