WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce

Information

Software Type Plugin
Software Slug webinar-ignition (view on wordpress.org)
Software Status Active
Software Author tobias_conrad
Software Website webinarignition.com
Software Downloads 61,812
Software Active Installs 90
Software Record Last Updated July 21, 2026

12 Vulnerabilities

Submit a Vulnerability
WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce < 4.08.253 - Unauthenticated Privilege Escalation
9.8
CVE-2026-42758
May 30, 2026
Researcher: hhhai
WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce < 4.08.253 - Authenticated (Subscriber+) Arbitrary File Deletion
8.1
CVE-2026-42757
May 30, 2026
Researcher: hhhai
WebinarIgnition < 4.09.86 - Unauthenticated SQL Injection
7.5
CVE-2026-40797
May 4, 2026
Researcher: Dahmani Toumi (pegaSUS)
WebinarIgnition <= 4.06.04 - Missing Authorization
4.3
CVE-2025-60088
Aug 10, 2025
Researcher: Denver Jackson
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition <= 4.03.32 - Unauthenticated Login Token Generation to Authentication Bypass
9.8
CVE-2025-6441
Jul 23, 2025
Researcher: kr0d
WebinarIgnition <= 3.05.8 - Cross-Site Request Forgery
4.3
CVE-2024-32445
Apr 12, 2024
Researcher: Dhabaleshwar Das
WebinarIgnition <= 3.05.0 - Authenticated(Subscriber+) PHP Object Injection
7.5
CVE-2023-51422
Dec 27, 2023
Researcher: Rafie Muhammad
WebinarIgnition <= 3.05.0 - Unauthenticated SQL Injection
9.8
CVE-2023-51423
Dec 27, 2023
Researcher: Rafie Muhammad
WebinarIgnition <= 3.05.0 - Missing Authorization to Unauthenticated Privilege Escalation
9.8
CVE-2023-51424
Dec 27, 2023
Researcher: Rafie Muhammad
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
6.1
CVE-2023-33999
Jul 18, 2023
Researcher: Rafie Muhammad
WebinarIgnition <= 2.14.2 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-25023
Feb 3, 2023
Researcher: yuyudhn
Freemius SDK <= 2.4.2 - Missing Authorization Checks
6.3
CVE-2022-4974
Mar 4, 2022
Researchers:
Title Status CVE ID CVSS Researchers Date
WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce < 4.08.253 - Unauthenticated Privilege Escalation Patched CVE-2026-42758 9.8 hhhai May 30, 2026
WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce < 4.08.253 - Authenticated (Subscriber+) Arbitrary File Deletion Patched CVE-2026-42757 8.1 hhhai May 30, 2026
WebinarIgnition < 4.09.86 - Unauthenticated SQL Injection Patched CVE-2026-40797 7.5 Dahmani Toumi (pegaSUS) May 4, 2026
WebinarIgnition <= 4.06.04 - Missing Authorization Patched CVE-2025-60088 4.3 Denver Jackson August 10, 2025
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition <= 4.03.32 - Unauthenticated Login Token Generation to Authentication Bypass Patched CVE-2025-6441 9.8 kr0d July 23, 2025
WebinarIgnition <= 3.05.8 - Cross-Site Request Forgery Patched CVE-2024-32445 4.3 Dhabaleshwar Das April 12, 2024
WebinarIgnition <= 3.05.0 - Authenticated(Subscriber+) PHP Object Injection Patched CVE-2023-51422 7.5 Rafie Muhammad December 27, 2023
WebinarIgnition <= 3.05.0 - Unauthenticated SQL Injection Patched CVE-2023-51423 9.8 Rafie Muhammad December 27, 2023
WebinarIgnition <= 3.05.0 - Missing Authorization to Unauthenticated Privilege Escalation Patched CVE-2023-51424 9.8 Rafie Muhammad December 27, 2023
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Patched CVE-2023-33999 6.1 Rafie Muhammad July 18, 2023
WebinarIgnition <= 2.14.2 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2023-25023 4.4 yuyudhn February 3, 2023
Freemius SDK <= 2.4.2 - Missing Authorization Checks Patched CVE-2022-4974 6.3 March 4, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation