Skip to content
OpenAdvisories
Unscored CVE-2021-24641 EUVD-2021-11553GHSA-7gcj-6xx8-443m

Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)

Published Nov 23, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion

Affected products

VendorProductAffectedFixed
— Images to WebP 1.9 – < 1.9 1.9

References