WordPress plugin
WebinarIgnition – AI & MCP Webinar Builder on Your WordPress: Live, Automated & Evergreen, WooCommerce Upsells Inside security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical4
- High3
- Medium5
- Low0
All WebinarIgnition – AI & MCP Webinar Builder on Your WordPress: Live, Automated & Evergreen, WooCommerce Upsells Inside vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Authenticated (Subscriber+) Arbitrary File Deletion <4.08.253Update to 4.08.253 | CVE-2026-42757 | |
| Critical9.8 | Unauthenticated Privilege Escalation <4.08.253Update to 4.08.253 | CVE-2026-42758 | |
| High7.5 | Unauthenticated SQL Injection <4.09.86Update to 4.09.86 | CVE-2026-40797 | |
| Medium4.3 | Missing Authorization ≤4.06.04Update to 4.06.05 | CVE-2025-60088 | |
| Critical9.8 | Unauthenticated Login Token Generation to Authentication Bypass ≤4.03.32Update to 4.03.33 | CVE-2025-6441 | |
| Medium4.3 | Cross-Site Request Forgery ≤3.05.8Update to 3.06.0 | CVE-2024-32445 | |
| High7.5 | Authenticated(Subscriber+) PHP Object Injection ≤3.05.4Update to 3.05.5 | CVE-2023-51422 | |
| Critical9.8 | Missing Authorization to Unauthenticated Privilege Escalation ≤3.05.0Update to 3.05.1 | CVE-2023-51424 | |
| Critical9.8 | Unauthenticated SQL Injection ≤3.05.0Update to 3.05.1 | CVE-2023-51423 | |
| Medium6.1 | Reflected Cross-Site Scripting via fs_request_get ≤1.9.2No patch available | CVE-2023-33999 | |
| Medium4.4 | Authenticated (Admin+) Stored Cross-Site Scripting ≤2.14.2Update to 2.14.3 | CVE-2023-25023 | |
| Medium6.3 | Missing Authorization Checks all versionsNo patch available | CVE-2022-4974 |
- High8.1Authenticated (Subscriber+) Arbitrary File Deletion
<4.08.253Update to 4.08.253
- Critical9.8Unauthenticated Privilege Escalation
<4.08.253Update to 4.08.253
- High7.5Unauthenticated SQL Injection
<4.09.86Update to 4.09.86
- Medium4.3Missing Authorization
≤4.06.04Update to 4.06.05
- Critical9.8Unauthenticated Login Token Generation to Authentication Bypass
≤4.03.32Update to 4.03.33
- Medium4.3Cross-Site Request Forgery
≤3.05.8Update to 3.06.0
- High7.5Authenticated(Subscriber+) PHP Object Injection
≤3.05.4Update to 3.05.5
- Critical9.8Missing Authorization to Unauthenticated Privilege Escalation
≤3.05.0Update to 3.05.1
- Critical9.8Unauthenticated SQL Injection
≤3.05.0Update to 3.05.1
- Medium6.1Reflected Cross-Site Scripting via fs_request_get
≤1.9.2No patch available
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤2.14.2Update to 2.14.3
- Medium6.3Missing Authorization Checks
all versionsNo patch available
WebinarIgnition – AI & MCP Webinar Builder on Your WordPress: Live, Automated & Evergreen, WooCommerce Upsells Inside: common questions
Does WebinarIgnition – AI & MCP Webinar Builder on Your WordPress: Live, Automated & Evergreen, WooCommerce Upsells Inside have known vulnerabilities?
Yes. VulnCrest Radar lists 12 known vulnerabilities in WebinarIgnition – AI & MCP Webinar Builder on Your WordPress: Live, Automated & Evergreen, WooCommerce Upsells Inside: 4 critical, 3 high, 5 medium. At least one is not fixed in the latest version.
How do I check which version of WebinarIgnition – AI & MCP Webinar Builder on Your WordPress: Live, Automated & Evergreen, WooCommerce Upsells Inside I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WebinarIgnition – AI & MCP Webinar Builder on Your WordPress: Live, Automated & Evergreen, WooCommerce Upsells Inside vulnerability?
CVE-2026-42757, published May 30, 2026: WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce < 4.08.253 - Authenticated (Subscriber+) Arbitrary File Deletion. Severity: High (CVSS 8.1).
Is any WebinarIgnition – AI & MCP Webinar Builder on Your WordPress: Live, Automated & Evergreen, WooCommerce Upsells Inside vulnerability listed in CISA KEV?
No. None of the known WebinarIgnition – AI & MCP Webinar Builder on Your WordPress: Live, Automated & Evergreen, WooCommerce Upsells Inside vulnerabilities is currently listed in the CISA KEV catalog.