Skip to content
Not rated

CVE-2021-24644 The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to…

Description

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue

Affected products and versions

Product Affected versions Fixed in
Images to WebP 1.9 earliest → < 1.9 1.9
The 2 CVEs of Images to WebP →
Track this CVE