CVE Database /
CVE-2019-15834
CVE · High
CVE-2019-15834 — Converter for Media – Optimize images | Convert WebP & AVIF [webp-converter-for-media] < 1.0.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-15834
|
Converter for Media – Optimize images | Convert WebP & AVIF [webp-converter-for-media] < 1.0.3 |
Cross-Site Request Forgery (CSRF) |
High
8.8
|
< 1.0.3
|
1.0.3 |
2019-06-27 |
—
|
CVE-2019-15834
The WebP Converter for Media plugin through version 1.0.2 contains a cross-site request forgery vulnerability stemming from inadequate nonce verification. Attackers without authentication can exploit this flaw to perform restricted administrative actions if they can deceive a site administrator into clicking a malicious link. The vulnerability was fixed in version 1.0.3.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings