CVE-2024-11271

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, ...

CVE-2024-11270

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated...

CVE-2024-11270

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated...

CVE-2024-11270 WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated...

CVE-2024-11270

CVE-2024-11270 affects WordPress Webinar Plugin – WebinarPress (all versions up to and including 1.33.24). A missing capability check in sync-import-imgs and missing file type validation allows authenticated attackers with subscriber-level access or higher to create arbitrary files, leading to re...

CVE-2024-11271 WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Webinar Updates

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, ...

WordPress plugin WebinarPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-11271: Missing Authorization

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, ...

PT-2025-1633 · WordPress · Webinarpress

Name of the Vulnerable Software and Affected Versions: WordPress Webinar Plugin – WebinarPress plugin for WordPress versions up to, and including, 1.33.24 Description: The WordPress WebinarPress plugin is vulnerable due to a missing capability check on several functions. This makes it possible fo...

CVE-2024-11270: Missing Authorization

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated...

PT-2025-1632

Name of the Vulnerable Software and Affected Versions WebinarPress plugin for WordPress versions up to, and including, 1.33.24 Description The WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the sync-import-imgs function and missing...

WordPress plugin WebinarPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress WebinarPress plugin <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary File Creation vulnerability discovered by Lucio Sá in WordPress Plugin WebinarPress versions = 1.33.24...

CVE-2024-43339

Cross-Site Request Forgery CSRF vulnerability in WebinarPress allows Cross-Site Scripting XSS.This issue affects WebinarPress: from n/a through 1.33.20...

CVE-2024-43339

Cross-Site Request Forgery CSRF vulnerability in WebinarPress allows Cross-Site Scripting XSS.This issue affects WebinarPress: from n/a through 1.33.20...

CVE-2024-43339 WordPress WordPress Webinar Plugin – WebinarPress plugin <= 1.33.20 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WebinarPress allows Cross-Site Scripting XSS.This issue affects WebinarPress: from n/a through 1.33.20...

CVE-2024-43339

CVE-2024-43339 is a CSRF-related vulnerability in the WordPress WebinarPress plugin (affected: 1.33.20 and earlier). The issue is described as allowing Cross-Site Scripting (XSS). Public records indicate remediation requires upgrading to a version that contains a fix; however, no exact patched ve...

CVE-2024-43339 WordPress WordPress Webinar Plugin – WebinarPress plugin <= 1.33.20 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WebinarPress allows Cross-Site Scripting XSS.This issue affects WebinarPress: from n/a through 1.33.20...

CVE-2024-43339: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WebinarPress allows Cross-Site Scripting XSS.This issue affects WebinarPress: from n/a through 1.33.20...

PT-2024-30505 · Unknown · Webinarpress

Name of the Vulnerable Software and Affected Versions: WebinarPress versions 1.33.20 and earlier Description: A Cross-Site Request Forgery CSRF issue in WebinarPress allows for Cross-Site Scripting XSS. Recommendations: For versions 1.33.20 and earlier, update to a version that contains a fix for...