CVE-2021-25074

WebP Converter for Media < 4.0.3 - Unauthenticated Open redirect

EPSS 2.5%CWE-601

The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue

Produtos afetados

Unknown · WebP Converter for Media – Convert WebP and AVIF & Optimize Images

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://wpscan.com/vulnerability/f3c0a155-9563-4533-97d4-03b9bac83164