CVE

CVE-2021-24644

7.5

CVSS

Description

The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the tab parameter before passing it to the include() function, which could lead to a Local File Inclusion issue

Attack Vector

Privileges Req.

User Interaction

images to webp

Updated Sep 26, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24644 Scanner

CVE-2021-24644 Scanner - Local File Inclusion (LFI) vulnerability in Images to WebP

Used 2.9k times · 3.3k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: images to webp

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →