Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:images_to_webp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductImages To Webp (01ec0cb7-d0ee-5bcf-bca0-53cb60d4e782)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24644 vulnerable 2026-06-08 05:30:38.930147 Images to WebP < 1.9 - Authenticated Local File Inclusion
The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue
Published: 2021-11-23T19:16:03.000Z
Updated: 2024-08-03T19:35:20.316Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24641 vulnerable 2026-06-08 05:30:38.924785 Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion
Published: 2021-11-23T19:16:01.000Z
Updated: 2024-08-03T19:35:20.367Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.