Vulnerabilities / WebP Express
WebP Express vulnerabilities
Advisories WPSec published for WebP Express. Other sources may list more. Its attack surface: WebP Express on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-20 | WPSEC-2026-1254 | WebP Express <= 0.25.15 - Unauthenticated Stored Cross-Site Scripting via Alter HTML | Medium 5.4 | 0.25.16 |
| 2026-10-20 | WPSEC-2026-1253 | WebP Express <= 0.25.15 - Unauthenticated Authentication Bypass in Web Service | Medium 4.8 | 0.25.16 |
License: CC BY 4.0