Webinarpress

webinarpress

8 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-62972 1Webinarpress 1Webinarpress Apr 27, 2026 Oct 27, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.
CVE-2025-47635 1Webinarpress 1Webinarpress Apr 23, 2026 May 7, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Server-Side Request Forgery (SSRF) vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Server Side Request Forgery.This issue affects WebinarPress: from n/a through <= 1.33.28.
CVE-2025-32693 1Webinarpress 1Webinarpress Apr 23, 2026 Apr 9, 2025 N/A· v4 4.7 MEDIUM· v3 N/A· v2 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Phishing.This issue affects WebinarPress: from n/a through <= 1.33.28.
CVE-2025-31883 1Webinarpress 1Webinarpress Apr 23, 2026 Apr 1, 2025 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Stored XSS.This issue affects WebinarPress: from n/a through <= 1...Show more Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Stored XSS.This issue affects WebinarPress: from n/a through <= 1.33.28.Show less
CVE-2025-31882 1Webinarpress 1Webinarpress Apr 23, 2026 Apr 1, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.
CVE-2024-11271 1Webinarpress 1Webinarpress Jan 17, 2025 Jan 8, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it p...Show more The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify webinars.Show less
CVE-2024-11270 1Webinarpress 1Webinarpress Jan 17, 2025 Jan 8, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versi...Show more The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files that can lead to remote code execution.Show less
CVE-2024-43339 1Webinarpress 1Webinarpress Aug 27, 2024 Aug 26, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross-Site Request Forgery (CSRF) vulnerability in WebinarPress allows Cross-Site Scripting (XSS).This issue affects WebinarPress: from n/a through 1.33.20.