Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin WebP Express Arbitrary File Disclosure - CVE-2019-15330 - Vulnerability Database
WP Plugin Webp Express

WordPress Plugin WebP Express Arbitrary File Disclosure - CVE-2019-15330

Medium
Reference: CVE-2019-15330
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-15330
Title: WordPress Plugin WebP Express Arbitrary File Disclosure
Overview:

WordPress Plugin WebP Express is prone to an arbitrary file disclosure vulnerability because it fails to properly verify user-supplied input. An attacker can exploit this vulnerability to view local files in the context of the web server process which may aid in launching further attacks. WordPress Plugin WebP Express version 0.14.10 is vulnerable prior versions may also be affected.