WordPress Webinar Plugin <= 1.33.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin WebinarPress versions = 1.33.28...

CVE-2025-31883

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Stored XSS.This issue affects WebinarPress: from n/a through = 1.33.28...

CVE-2025-31883

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPWebinarSystem WebinarPress allows Stored XSS. This issue affects WebinarPress: from n/a through 1.33.27...

CVE-2025-31882

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through = 1.33.28...

CVE-2025-31882

Missing Authorization vulnerability in WPWebinarSystem WebinarPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WebinarPress: from n/a through 1.33.27...

CVE-2025-31883 WordPress WebinarPress plugin <= 1.33.28 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Stored XSS.This issue affects WebinarPress: from n/a through = 1.33.28...

CVE-2025-31883

Technical details for CVE-2025-31883 are not provided in the connected documents; the available info mentions a Stored XSS in WebinarPress/WP-WebinarSystem (WordPress plugin) but gives no specifics on affected versions, vectors, impact, or remediation.

WordPress plugin WebinarPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-14258

Name of the Vulnerable Software and Affected Versions WebinarPress versions 1.33.27 and earlier Description The issue is related to a Missing Authorization vulnerability in WPWebinarSystem WebinarPress, which allows exploiting incorrectly configured access control security levels. Recommendations...

WordPress plugin WebinarPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2025-14259

Name of the Vulnerable Software and Affected Versions WebinarPress versions 1.33.27 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For versions...

CVE-2024-34818

Cross-Site Request Forgery CSRF vulnerability in WebinarPress.This issue affects WebinarPress: from n/a through 1.33.17...

CVE-2024-11271

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, ...

CVE-2024-31256

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10...

CVE-2024-11271

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, ...

CVE-2024-11271

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, ...

CVE-2024-11270

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated...

CVE-2024-11270

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated...

CVE-2024-11270 WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated...

CVE-2024-11270

CVE-2024-11270 affects WordPress Webinar Plugin – WebinarPress (all versions up to and including 1.33.24). A missing capability check in sync-import-imgs and missing file type validation allows authenticated attackers with subscriber-level access or higher to create arbitrary files, leading to re...