Known CVE

WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect

WordPress WebP Converter for Media < 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an open redirect issue.

CVE-2021-25074

Medium2021CVSS 6.1CWE-601

cve2021 · redirect · wp-plugin · webpconverter · wpscan · wordpress · webp_converter_for_media_project · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website