Vulnerabilities > Webp Converter FOR Media Project

DATE CVE VULNERABILITY TITLE RISK
2022-01-24 CVE-2021-25074 Open Redirect vulnerability in Webp Converter for Media Project Webp Converter for Media
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue
5.8
2019-08-30 CVE-2019-15834 Cross-Site Request Forgery (CSRF) vulnerability in Webp Converter FOR Media Project Webp Converter for Media 1.0.0/1.0.1/1.0.2
The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.
6.8