


Perceptive Security
SOC/SIEM Consultancy

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ludwig You QuickWebP – Compress / Optimize Images & Co…
Published:
26 mei 2026 om 22:00:00
Alert date:
27 mei 2026 om 15:06:57
Source:
nvd.nist.gov
Web Technologies
Path traversal vulnerability in Ludwig You's QuickWebP WordPress plugin allows attackers to bypass directory restrictions. The vulnerability affects QuickWebP - Compress/Optimize Images & Convert WebP plugin versions up to 3.2.7. This improper pathname limitation flaw could enable arbitrary file deletion and unauthorized access to files outside restricted directories. The vulnerability is classified as high severity and impacts WordPress sites using the affected plugin versions.
Technical details
Mitigation steps:
Affected products:
QuickWebP WordPress Plugin
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-42756
https://patchstack.com/database/Wordpress/Plugin/quickwebp/vulnerability/wordpress-quickwebp-compress-optimize-images-convert-webp-seo-friendly-plugin-3-2-7-arbitrary-file-deletion-vulnerability?_s_id=cve
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
