Medium 5.3
2025-12-04< 0.25.11
CVE-2025-11379
Minimum safe version
0.25.11
Update to 0.25.11 or later to address 5 fixable vulnerabilities
CVE-2025-11379
WordPress WebP Express plugin <= 0.14.0 - Cross-Site Request Forgery (CSRF) vulnerability
WordPress WebP Express plugin <= 0.14.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
CVE-2019-15330
CVE-2019-15837