Vulnerabilities

TI-2025-39120 CVE-2025-62972 · GHSA-p9x7-3xvx-2h65

WordPress WebinarPress plugin <= 1.33.28 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0027 Published 2025-10-27 No fix listed CWE-862

TI-2025-30132 CVE-2025-47635 · GHSA-qf94-9355-3gff

WordPress WebinarPress plugin <= 1.33.28 - Server Side Request Forgery (SSRF) Vulnerability

MEDIUM 42

Server-Side Request Forgery (SSRF) vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Server Side Request Forgery.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00383 Published 2025-05-07 No fix listed CWE-918

TI-2025-23758 CVE-2025-32693 · GHSA-7f8r-wrhj-9gh8

WordPress WebinarPress plugin <= 1.33.28 - Open Redirection Vulnerability

LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Phishing.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00397 Published 2025-04-09 No fix listed CWE-601

TI-2025-23020 CVE-2025-31883 · GHSA-jpj3-4vjw-5jmq

WordPress WebinarPress plugin <= 1.33.28 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Stored XSS.This issue affects WebinarPress: from n/a through <= 1…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00236 Published 2025-04-01 No fix listed CWE-79

TI-2025-23019 CVE-2025-31882 · GHSA-m2fw-cvrc-qphg

WordPress Webinar Plugin <= 1.33.28 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00291 Published 2025-04-01 No fix listed CWE-862

TI-2024-10440 CVE-2024-11270 · GHSA-9q58-xhx2-pwfc

Missing authorization in WPWebinarSystem WebinarPress – Webinar System for WordPress

MEDIUM 42

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00936 Published 2025-01-08 No fix listed CWE-862

TI-2024-10441 CVE-2024-11271 · GHSA-924c-vmpj-6rfg

Missing authorization in WPWebinarSystem WebinarPress – Webinar System for WordPress

MEDIUM 40

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2025-01-08 No fix listed CWE-862

TI-2024-28991 CVE-2024-43339 · GHSA-x2xr-j725-65qf

WordPress WordPress Webinar Plugin – WebinarPress plugin <= 1.33.20 - Cross Site Request Forgery (CSRF) vulnerability

LOW 26

Cross-Site Request Forgery (CSRF) vulnerability in WebinarPress allows Cross-Site Scripting (XSS).This issue affects WebinarPress: from n/a through 1.33.20.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00168 Published 2024-08-26 No fix listed CWE-352

TI-2024-23105 CVE-2024-34818 · GHSA-46qx-cv76-mrg4

WordPress Webinar plugin <= 1.33.17 - Cross Site Request Forgery (CSRF) vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in WebinarPress.This issue affects WebinarPress: from n/a through 1.33.17.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00227 Published 2024-05-10 No fix listed CWE-352

TI-2024-20632 CVE-2024-31256 · GHSA-w9cw-hv7g-qxq8

WordPress WebinarPress plugin <= 1.33.10 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00372 Published 2024-04-07 No fix listed CWE-79

Vulnerabilities

Filters