https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-62972.htmlhttps://patchthecve.com/cve/CVE-2025-62972.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 4.3: Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.https://patchthecve.com/cve/CVE-2025-47635.htmlhttps://patchthecve.com/cve/CVE-2025-47635.htmlWed, 17 Jun 2026 09:28:26 +0000MEDIUM 5.5: Server-Side Request Forgery (SSRF) vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Server Side Request Forgery.This issue affects WebinarPress: from n/a through <= 1.33.28.https://patchthecve.com/cve/CVE-2025-32693.htmlhttps://patchthecve.com/cve/CVE-2025-32693.htmlWed, 17 Jun 2026 09:12:25 +0000MEDIUM 4.7: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Phishing.This issue affects WebinarPress: from n/a through <= 1.33.28.https://patchthecve.com/cve/CVE-2025-31883.htmlhttps://patchthecve.com/cve/CVE-2025-31883.htmlWed, 17 Jun 2026 09:11:07 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Stored XSS.This issue affects WebinarPress: from n/a through <= 1.33.28.https://patchthecve.com/cve/CVE-2025-31882.htmlhttps://patchthecve.com/cve/CVE-2025-31882.htmlWed, 17 Jun 2026 09:11:06 +0000MEDIUM 4.3: Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.https://patchthecve.com/cve/CVE-2024-11271.htmlhttps://patchthecve.com/cve/CVE-2024-11271.htmlWed, 17 Jun 2026 06:57:26 +0000HIGH 8.8: The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to https://patchthecve.com/cve/CVE-2024-11270.htmlhttps://patchthecve.com/cve/CVE-2024-11270.htmlWed, 17 Jun 2026 06:57:26 +0000HIGH 8.8: The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the 'sync-import-imgs' function and missing file type validation in all versions up to, and including, 1.33.24. This makes it possible for authenticated attahttps://patchthecve.com/cve/CVE-2024-43339.htmlhttps://patchthecve.com/cve/CVE-2024-43339.htmlWed, 17 Jun 2026 07:50:49 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in WebinarPress allows Cross-Site Scripting (XSS).This issue affects WebinarPress: from n/a through 1.33.20.