Read the docs

WPWebinarSystem

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

WPWebinarSystem records in CISA KEV

No WPWebinarSystem vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Webinarpress 8 records MEDIUM

Records

10 records

TI-2024-10440 CVE-2024-11270 · GHSA-9q58-xhx2-pwfc

Missing authorization in WPWebinarSystem WebinarPress – Webinar System for WordPress

Priority MEDIUM 42

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00936 Published 2025-01-08 No fix listed CWE-862
TI-2025-23020 CVE-2025-31883 · GHSA-jpj3-4vjw-5jmq

WordPress WebinarPress plugin <= 1.33.28 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Stored XSS.This issue affects WebinarPress: from n/a through <= 1…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00236 Published 2025-04-01 No fix listed CWE-79
TI-2025-23758 CVE-2025-32693 · GHSA-7f8r-wrhj-9gh8

WordPress WebinarPress plugin <= 1.33.28 - Open Redirection Vulnerability

Priority LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Phishing.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00397 Published 2025-04-09 No fix listed CWE-601
TI-2025-39120 CVE-2025-62972 · GHSA-p9x7-3xvx-2h65

WordPress WebinarPress plugin <= 1.33.28 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0027 Published 2025-10-27 No fix listed CWE-862
TI-2025-23019 CVE-2025-31882 · GHSA-m2fw-cvrc-qphg

WordPress Webinar Plugin <= 1.33.28 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00291 Published 2025-04-01 No fix listed CWE-862
Open these records in search →