Webp Converter For Media Project Webp Converter For Media — known CVE vulnerabilities

Every CVE whose affected-product data names Webp Converter For Media Project Webp Converter For Media, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2019-15834 — CVSS 8.8 (high): The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.
• CVE-2021-25074 — CVSS 6.1 (medium): The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before…