Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-25074

WebP Converter for Media < 4.0.3 - Unauthenticated Open redirect

Description

The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WebP Converter for Media – Convert WebP and AVIF & Optimize Images

  • 4.0.3 to < 4.0.3affected

References