WebinarPress vulnerabilities
We track 2 vulnerabilities in WebinarPress products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2025.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest WebinarPress vulnerabilities
- 8.8 High severity
WebinarPress – Webinar System for WordPress: Missing Authorization
The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This
- 7.1 High severity
WebinarPress: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10.