CVE-2022-29430: Png To Jpg Project Png To Jpg

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_quality.

Affected products

• Png To Jpg Project Png To Jpg: up to and including 4.0

Published 2022-05-20. Last modified 2026-06-17.