Skip to content
OpenAdvisories

Vendor

mateuszgbiorczyk

2 known vulnerabilities.

Products

Converter for Media – Optimize images | Convert WebP & AVIF 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-1356

    Converter for Media – Optimize images | Convert WebP & AVIF <= 6.5.1 - Unauthenticated Server-Side Request Forgery via src

    The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.5.1 via the PassthruLoader::load_image_source function. This makes it possible for unauth…

    mateuszgbiorczyk Converter for Media – Optimize images | Convert WebP & AVIF Web / CMS
  • Medium 4.3
    CVE-2025-13750

    Converter for Media <= 6.3.2 - Missing Authorization to Authenticated (Subscriber+) Optimized Image Deletion via regenerate-attachment REST Endpoint

    The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `/webp-converter/v1/regenerate-attachment` REST endpoint in all versions up to, an…

    mateuszgbiorczyk Converter for Media – Optimize images | Convert WebP & AVIF Web / CMS