CVE-2019-15837: Bitwise-It WebP Express

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

The webp-express plugin before 0.14.8 for WordPress has stored XSS.

Affected products

• Bitwise-It WebP Express: before 0.14.8 (fixed in 0.14.8)

Published 2019-08-30. Last modified 2026-06-17.