Plugin icon

WebP Express

webp-express

Vulnerabilities:

4

Last Updated:

October 18, 2026

Active Installs:

300000

Published
Title
Fixed in
CVSS
Published
2026-10-20
Title
WebP Express < 0.25.16 - Unauthenticated Stored XSS via Alter HTML Parser
Fixed in
Fixed in 0.25.16
CVSS
7.5 (high)
Published
2025-12-03
Title
WebP Express < 0.25.11 - Unauthenticated Information Exposure
Fixed in
Fixed in 0.25.11
CVSS
5.3 (medium)
Published
2019-06-26
Title
WebP Express < 0.14.8 - Authenticated Stored XSS
Fixed in
Fixed in 0.14.8
CVSS
5.4 (medium)
Published
2019-06-16
Title
WebP Express <= 0.14.10 - Multiple Issues
Fixed in
Fixed in 0.14.11
CVSS
7.5 (high)