cleantalk
Vulnerabilities and Security Researches

WebP Express, PSC-2026-64689

PSC, Research URL

PSC-2026-64689

Application

WebP Express

Published on
Aug 24, 2026
Research Description
Image conversion plugins process uploaded files, write derivatives, update rewrite rules, and may invoke local or remote converters. WebP Express version 0.25.15 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64689, confirming that the review focused on file access, conversion inputs, generated output paths, rewrite behavior, converter configuration, and protection of privileged settings.
Affected versions
Min 0.25.15, max 0.25.15.
Status
SAFE & CERTIFIED