WordPress plugin
WebinarPress – Webinar System for WordPress security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High2
- Medium8
- Low0
All WebinarPress – Webinar System for WordPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤1.33.30Update to 1.33.31 | CVE-2025-62972 | |
| Medium5.5 | Authenticated (Administrator+) Server-Side Request Forgery ≤1.33.30Update to 1.33.31 | CVE-2025-47635 | |
| Medium6.1 | Open Redirect ≤1.33.27No patch available | CVE-2025-32693 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤1.33.30Update to 1.33.31 | CVE-2025-31883 | |
| Medium4.3 | Missing Authorization ≤1.33.27No patch available | CVE-2025-31882 | |
| High8.8 | Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation ≤1.33.24Update to 1.33.25 | CVE-2024-11270 | |
| High8.8 | Missing Authorization to Authenticated (Subscriber+) Webinar Updates ≤1.33.24Update to 1.33.25 | CVE-2024-11271 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.33.20Update to 1.33.21 | CVE-2024-43339 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.33.20Update to 1.33.21 | CVE-2024-34818 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.33.9Update to 1.33.10 | CVE-2024-31256 |
- Medium4.3Missing Authorization
≤1.33.30Update to 1.33.31
- Medium5.5Authenticated (Administrator+) Server-Side Request Forgery
≤1.33.30Update to 1.33.31
- Medium6.1Open Redirect
≤1.33.27No patch available
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.33.30Update to 1.33.31
- Medium4.3Missing Authorization
≤1.33.27No patch available
- High8.8Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation
≤1.33.24Update to 1.33.25
- High8.8Missing Authorization to Authenticated (Subscriber+) Webinar Updates
≤1.33.24Update to 1.33.25
- Medium4.3Cross-Site Request Forgery
≤1.33.20Update to 1.33.21
- Medium4.3Cross-Site Request Forgery
≤1.33.20Update to 1.33.21
- Medium6.1Reflected Cross-Site Scripting
≤1.33.9Update to 1.33.10
WebinarPress – Webinar System for WordPress: common questions
Does WebinarPress – Webinar System for WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in WebinarPress – Webinar System for WordPress: 2 high, 8 medium. At least one is not fixed in the latest version.
How do I check which version of WebinarPress – Webinar System for WordPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WebinarPress – Webinar System for WordPress vulnerability?
CVE-2025-62972, published Oct 19, 2025: WebinarPress <= 1.33.30 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any WebinarPress – Webinar System for WordPress vulnerability listed in CISA KEV?
No. None of the known WebinarPress – Webinar System for WordPress vulnerabilities is currently listed in the CISA KEV catalog.