CVE-2021-24641

Name of the Vulnerable Software and Affected Versions Images to WebP WordPress plugin versions prior to 1.9

Description The issue concerns the lack of CSRF checks in the plugin when performing certain administrative actions. This could lead to modification of plugin settings, Denial-of-Service, and arbitrary image conversion.

Recommendations For versions prior to 1.9, update to version 1.9 or later to resolve the issue. As a temporary workaround, consider restricting access to administrative actions to minimize the risk of exploitation.