1. Home
  2. CVE Database
  3. CVE-2021-24641
HIGH · 8.1

CVE-2021-24641

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service,...

Vulnerability Description

The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service, as well as arbitrary image conversion

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Imagestowebp ProjectImages To Webp< 1.9

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2021-24641?

CVE-2021-24641 is a vulnerability with a CVSS score of 8.1 (HIGH). The Images to WebP WordPress plugin before 1.9 does not have CSRF checks in place when performing some administrative actions, which could result in modification of plugin settings, Denial-of-Service,...

How severe is CVE-2021-24641?

CVE-2021-24641 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-24641?

Check the references section above for vendor advisories and patch information. Affected products include: Imagestowebp Project Images To Webp.