CVE-2024-11271 WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Webinar Updates

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, ...

PT-2025-1633 · WordPress · Webinarpress

Name of the Vulnerable Software and Affected Versions: WordPress Webinar Plugin – WebinarPress plugin for WordPress versions up to, and including, 1.33.24 Description: The WordPress WebinarPress plugin is vulnerable due to a missing capability check on several functions. This makes it possible fo...

WordPress plugin WebinarPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-1632

Name of the Vulnerable Software and Affected Versions WebinarPress plugin for WordPress versions up to, and including, 1.33.24 Description The WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the sync-import-imgs function and missing...

WordPress plugin WebinarPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress WebinarPress plugin <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary File Creation vulnerability discovered by Lucio Sá in WordPress Plugin WebinarPress versions = 1.33.24...

CVE-2024-43339

Cross-Site Request Forgery CSRF vulnerability in WebinarPress allows Cross-Site Scripting XSS.This issue affects WebinarPress: from n/a through 1.33.20...

CVE-2024-43339

Cross-Site Request Forgery CSRF vulnerability in WebinarPress allows Cross-Site Scripting XSS.This issue affects WebinarPress: from n/a through 1.33.20...

CVE-2024-43339 WordPress WordPress Webinar Plugin – WebinarPress plugin <= 1.33.20 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WebinarPress allows Cross-Site Scripting XSS.This issue affects WebinarPress: from n/a through 1.33.20...

CVE-2024-43339

CVE-2024-43339 is a CSRF-related vulnerability in the WordPress WebinarPress plugin (affected: 1.33.20 and earlier). The issue is described as allowing Cross-Site Scripting (XSS). Public records indicate remediation requires upgrading to a version that contains a fix; however, no exact patched ve...

CVE-2024-43339 WordPress WordPress Webinar Plugin – WebinarPress plugin <= 1.33.20 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WebinarPress allows Cross-Site Scripting XSS.This issue affects WebinarPress: from n/a through 1.33.20...

PT-2024-30505 · Unknown · Webinarpress

Name of the Vulnerable Software and Affected Versions: WebinarPress versions 1.33.20 and earlier Description: A Cross-Site Request Forgery CSRF issue in WebinarPress allows for Cross-Site Scripting XSS. Recommendations: For versions 1.33.20 and earlier, update to a version that contains a fix for...

WordPress plugin WebinarPress 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

WordPress WordPress Webinar Plugin – WebinarPress plugin <= 1.33.20 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin WebinarPress versions = 1.33.20...

WordPress WebinarPress Plugin <= 1.33.20 is vulnerable to Cross Site Request Forgery (CSRF)

Software WebinarPress Type Plugin Vulnerable versions = 1.33.20 Fixed in 1.33.21 OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-43339 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID bc59bbe68a52 Credits Le Ngoc Anh Required privilege...

WebinarPress <= 1.33.19 - Cross-Site Request Forgery

Description The plugin is vulnerable to Cross-Site Request Forgery due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown action granted they can trick a site administrator into performing an action such as...

CVE-2024-34818

Cross-Site Request Forgery CSRF vulnerability in WebinarPress.This issue affects WebinarPress: from n/a through 1.33.17...

WordPress plugin WebinarPress 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin...

CVE-2024-34818

CVE-2024-34818 : CSRF vulnerability in WebinarPress (WordPress plugin wp-webinarsystem) affecting versions up to 1.33.17. Connected sources confirm the CSRF issue but do not provide technical exploitation details, root-cause analysis, or a remediation/patch. No further specifics are available in ...

CVE-2024-34818 WordPress Webinar plugin <= 1.33.17 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WebinarPress.This issue affects WebinarPress: from n/a through 1.33.17...