Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7gcj-6xx8-443m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion

EPSS

Процентиль: 25%
0.00089
Низкий

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.1
nvd
около 4 лет назад

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion

EPSS

Процентиль: 25%
0.00089
Низкий

Дефекты

CWE-352