CVE-2021-24641
Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)
- State
- Published
- Severity
- Not scored
- Published
- Nov 23, 2021
- Updated
- Aug 3, 2024
- Reserved
- Jan 14, 2021
Description
The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion
Scores
The record has no CVSS score.
Weaknesses
- CWE-352 Cross-Site Request Forgery (CSRF)
Affected Products
| Product | Versions |
|---|---|
Images to WebPUnknown |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.