Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10

Export CSV
CVE-2024-11271

WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Webinar Updates

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify webinars.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Webinarpress
Products
Webinarpress
CVE-2024-34818

WordPress Webinar plugin <= 1.33.17 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in WebinarPress.This issue affects WebinarPress: from n/a through 1.33.17.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Webinarpress
Products
Webinarpress
CVE-2025-62972

WordPress WebinarPress plugin <= 1.33.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Webinarpress Wordpress
Products
Webinarpress Wordpress
CVE-2025-47635

WordPress WebinarPress plugin <= 1.33.28 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery (SSRF) vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Server Side Request Forgery.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Webinarpress
Products
Webinarpress
CVE-2025-32693

WordPress WebinarPress plugin <= 1.33.28 - Open Redirection Vulnerability

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Phishing.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Webinarpress
Products
Webinarpress
CVE-2025-31883

WordPress WebinarPress plugin <= 1.33.28 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Stored XSS.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Webinarpress
Products
Webinarpress
CVE-2025-31882

WordPress Webinar Plugin <= 1.33.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Webinarpress
Products
Webinarpress
CVE-2024-31256

WordPress WebinarPress plugin <= 1.33.10 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Webinarpress Wordpress
Products
Webinarpress Wordpress
CVE-2024-11270

WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files that can lead to remote code execution.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Webinarpress
Products
Webinarpress
CVE-2024-43339

WordPress WordPress Webinar Plugin – WebinarPress plugin <= 1.33.20 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in WebinarPress allows Cross-Site Scripting (XSS).This issue affects WebinarPress: from n/a through 1.33.20.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Webinarpress
Products
Webinarpress