CVE-2026-97328 | WebP Express Plugin up to 0.25.15 on WordPress HTML Parser HTML injection

October 22, 2026 Yanac

A vulnerability described as problematic has been identified in WebP Express Plugin up to 0.25.15 on WordPress. This impacts an unknown function of the component HTML Parser. Such manipulation leads to HTML injection.

This vulnerability is uniquely identified as CVE-2026-97328. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More