top of page
perceptive_background_267k.jpg

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ludwig You QuickWebP – Compress / Optimize Images & Co…

Published:

26 mei 2026 om 22:00:00

Alert date:

27 mei 2026 om 15:06:57

Source:

nvd.nist.gov

Click to open the original link from this advisory

Web Technologies

Path traversal vulnerability in Ludwig You's QuickWebP WordPress plugin allows attackers to bypass directory restrictions. The vulnerability affects QuickWebP - Compress/Optimize Images & Convert WebP plugin versions up to 3.2.7. This improper pathname limitation flaw could enable arbitrary file deletion and unauthorized access to files outside restricted directories. The vulnerability is classified as high severity and impacts WordPress sites using the affected plugin versions.

Technical details

Mitigation steps:

Affected products:

QuickWebP WordPress Plugin

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Deze website toont informatie afkomstig van externe bronnen; Perceptive aanvaardt geen verantwoordelijkheid voor de juistheid, volledigheid of actualiteit van deze informatie.

bottom of page