Webp Express

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-15837 Aug 30, 17:15 MEDIUM POC This Month

The webp-express plugin before 0.14.8 for WordPress has stored XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Wordpress Plugin Webp Express

NVD

CVSS 3.0

5.4

EPSS

0.8%

CVE-2019-15330 Aug 22, 19:15 HIGH This Week

The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Information Disclosure Wordpress Plugin Webp Express

NVD

CVSS 3.0

7.5

EPSS

1.8%

CVE-2019-15837

EPSS 1% CVSS 5.4

MEDIUM POC This Month

WordPress XSS Wordpress Plugin +1

NVD

CVE-2019-15330

EPSS 2% CVSS 7.5

HIGH This Week

WordPress Information Disclosure Wordpress Plugin +1

NVD