Vulnerabilities > CVE-2024-11271 - Missing Authorization vulnerability in Webinarpress
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
LOW Availability impact
NONE Summary
The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify webinars.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |