WebP Converter for Media < 4.0.3 - Unauthenticated Open redirect

The plugin contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue

https://example.com/wp-content/plugins/webp-converter-for-media/includes/passthru.php?src=https://wpscan.com