Skip to content
OpenAdvisories

Vendor

eastsidecode

1 known vulnerabilities.

Products

WP Enable WebP 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-15158

    WP Enable WebP <= 1.0 - Authenticated (Author+) Arbitrary File Upload

    The WP Enable WebP plugin for WordPress is vulnerable to arbitrary file uploads due to improper file type validation in the 'wpse_file_and_ext_webp' function in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, with A…

    eastsidecode WP Enable WebP Web / CMS