CVE-2021-24641
Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Nov 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion
Affected products
Unknown · Images to WebPWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →