CVE-2021-24644
Images to WebP < 1.9 - Authenticated Local File Inclusion
- State
- Published
- Severity
- Not scored
- Published
- Nov 23, 2021
- Updated
- Aug 3, 2024
- Reserved
- Jan 14, 2021
Description
The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue
Scores
The record has no CVSS score.
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
Images to WebPUnknown |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.