Lucene search

K
wpvulndbWpvulndbWPVDB-ID:466DD896-3E75-4D1F-ABCB-0C6A38151BEF
HistoryJan 05, 2024 - 12:00 a.m.

WebinarIgnition < 3.05.1 - Missing Authorization to Unauthenticated Privilege Escalation

2024-01-0500:00:00
wpscan.com
7
webinarignition
wordpress
privilege escalation

9.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Description The Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.05.0. This makes it possible for unauthenticated attackers to escalate their privileges.

CPENameOperatorVersion
eq3.05.1

9.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for WPVDB-ID:466DD896-3E75-4D1F-ABCB-0C6A38151BEF