CVE-2021-24641CWE-352
Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)
published November 23, 2021
What it is
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00537 · 44.4th percentile
- Weakness
- CWE-352 · Cross-Site Request Forgery (CSRF)
- Published
- 2021-11-23T19:16Z
EPSS history
Timeline