Extension WordPress
Vulnérabilités Converter for Media – Optimize images | Convert WebP & AVIF
Cette page rassemble les failles publiées pour Converter for Media – Optimize images | Convert WebP & AVIF, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Converter for Media – Optimize images | Convert WebP & AVIF
4 fiches
Converter for Media – Optimize images | Convert WebP & AVIF <= 6.5.1 – Unauthenticated Server-Side Request Forgery via src
The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.5.1 via the PassthruLoader::load_image_source function. This makes it possible for…
*-6.5.1
6.5.2
11/02/2026
Converter for Media <= 6.3.2 – Missing Authorization to Authenticated (Subscriber+) Optimized Image Deletion via regenerate-attachment REST Endpoint
The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `/webp-converter/v1/regenerate-attachment` REST endpoint in all versions up to,…
*-6.3.2
6.4.0
16/12/2025
WebP Converter for Media <= 4.0.2 – Unauthenticated Open Redirect
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue
[*, 4.0.3)
4.0.3
27/12/2021
WebP Converter for Media – Convert WebP and AVIF & Optimize Images <= 1.0.2 – Cross-Site Request Forgery
The WebP Converter for Media – Convert WebP and AVIF & Optimize Images plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation.…
*-1.0.2
1.0.3
27/06/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.