WebP Express vulnerabilities
We track 1 vulnerability in WebP Express products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest WebP Express vulnerabilities
- 7.5 High severity
WebP Express: Improper Neutralization of Input During Web Page Generation
The WebP Express WordPress plugin before 0.25.16 does not escape values that its bundled HTML parser re-emits into element attributes when a non-default image delivery mode is enabled, allowing unauthenticated users to submit content that is stored and later e