CVE-2019-15330 – WebP Express < 0.14.11 - Arbitrary File Read

https://notcve.org/view.php?id=CVE-2019-15330

The webp-express plugin before 0.14.11 for WordPress has insufficient protection against arbitrary file reading. El plugin webp-express versiones anteriores a 0.14.11 para WordPress, presenta una protección insuficiente contra la lectura arbitraria de archivos. • https://wordpress.org/plugins/webp-express/#developers • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •