WordPress plugin
WebinarPress – Webinar System for WordPress security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High2
- Medium8
- Low0
All WebinarPress – Webinar System for WordPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation ≤1.33.24Update to 1.33.25 | CVE-2024-11270 | |
| High8.8 | Missing Authorization to Authenticated (Subscriber+) Webinar Updates ≤1.33.24Update to 1.33.25 | CVE-2024-11271 |
- High8.8Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation
≤1.33.24Update to 1.33.25
- High8.8Missing Authorization to Authenticated (Subscriber+) Webinar Updates
≤1.33.24Update to 1.33.25
WebinarPress – Webinar System for WordPress: common questions
Does WebinarPress – Webinar System for WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in WebinarPress – Webinar System for WordPress: 2 high, 8 medium. At least one is not fixed in the latest version.
How do I check which version of WebinarPress – Webinar System for WordPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WebinarPress – Webinar System for WordPress vulnerability?
CVE-2025-62972, published Oct 19, 2025: WebinarPress <= 1.33.30 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any WebinarPress – Webinar System for WordPress vulnerability listed in CISA KEV?
No. None of the known WebinarPress – Webinar System for WordPress vulnerabilities is currently listed in the CISA KEV catalog.