CVE-2021-24641
PoC —CVSS 3.1
8.1 high
EPSS
<1%p43
Published
()
Modified
Description
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion
- Vendors
- imagestowebp project
- Products
- images to webp
- Ecosystems
- WordPress
- Weakness
- CWE-352
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.