Description (CNA)
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / WebP Converter for Media – Convert WebP and AVIF & Optimize Images | affected 4.0.3 before 4.0.3 |
CWE
CWE-601
References
ADP enrichment
No English description supplied.