CVE-2021-25074 — WebP Converter for Media < 4.0.3 - Unauthenticated Open redirect
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to…
Published: 2022-01-24 · CVSS: Unscored
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7