← back
CVE-2021-25074

WebP Converter for Media < 4.0.3 - Unauthenticated Open redirect

EPSS 2.5%CWE-601
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →