← All advisories

Medium severity5.4NVD Advisory· Published Aug 30, 2019· Updated Jun 17, 2026

CVE-2019-15837

CVE-2019-15837

Description

The webp-express plugin before 0.14.8 for WordPress has stored XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/webp-express plugindescription
WordPress/Webp Expressllm-fuzzy
Range: <0.14.8
Package: https://wordpress.org/plugins/webp-express
Bitwise It/Webp Express
cpe:2.3:a:bitwise-it:webp_express:*:*:*:*:*:wordpress:*:*
Range: <0.14.8

Patches

Vulnerability mechanics

References

2

wpvulndb.com/vulnerabilities/9389nvdExploitPatchThird Party Advisory
wordpress.org/plugins/webp-express/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.