CVE-2026-42756: Ludwig You Quickwebp – Compress / Optimize Images & Convert WebP | Seo Friendly
Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ludwig You QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly quickwebp allows Path Traversal.This issue affects QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly: from n/a through <= 3.2.7.
Affected products
- Ludwig You Quickwebp – Compress / Optimize Images & Convert WebP | Seo Friendly: up to and including 3.2.7
Published 2026-05-27. Last modified 2026-06-17.