title: WebP Converter for Media < 4.0.3 - Unauthenticated Open redirect
description: The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
product: WebP Converter for Media – Convert WebP and AVIF & Optimize Images
vendor: Unknown
versions:
lessThan: 4.0.3, status: affected, version: 4.0.3, versionType: custom
}