Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: WPWebinarSystem Component: Webinarpress Clear all filters
TI-2025-39120 CVE-2025-62972 · GHSA-p9x7-3xvx-2h65

WordPress WebinarPress plugin <= 1.33.28 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0027 Published 2025-10-27 No fix listed CWE-862
TI-2025-23758 CVE-2025-32693 · GHSA-7f8r-wrhj-9gh8

WordPress WebinarPress plugin <= 1.33.28 - Open Redirection Vulnerability

Priority LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Phishing.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00397 Published 2025-04-09 No fix listed CWE-601
TI-2025-23020 CVE-2025-31883 · GHSA-jpj3-4vjw-5jmq

WordPress WebinarPress plugin <= 1.33.28 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Stored XSS.This issue affects WebinarPress: from n/a through <= 1…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00236 Published 2025-04-01 No fix listed CWE-79
TI-2025-23019 CVE-2025-31882 · GHSA-m2fw-cvrc-qphg

WordPress Webinar Plugin <= 1.33.28 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00291 Published 2025-04-01 No fix listed CWE-862
TI-2024-10440 CVE-2024-11270 · GHSA-9q58-xhx2-pwfc

Missing authorization in WPWebinarSystem WebinarPress – Webinar System for WordPress

Priority MEDIUM 42

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00936 Published 2025-01-08 No fix listed CWE-862