CVE-2021-25074
24.01.2022, 08:15
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue
| Vendor | Product | Version |
|---|---|---|
| webp_converter_for_media_project | webp_converter_for_media | 𝑥 < 4.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration