system
Describe <CVE-2021-25074>.
user
What is <CVE-2021-25074>?
assistant
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue.