High severity8.8NVD Advisory· Published Jan 8, 2025· Updated Jun 17, 2026

CVE-2024-11271

Description

The WordPress Webinar Plugin – WebinarPress plugin for WordPress is vulnerable to modification of data due to a missing capability check on several functions in all versions up to, and including, 1.33.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify webinars.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Webinarpress/Webinarpress
cpe:2.3:a:webinarpress:webinarpress:*:*:*:*:*:wordpress:*:*
Range: <1.33.25
WordPress/Webinar Plugin – WebinarPressllm-create
Range: <=1.33.24
wpwebinarsystem/WebinarPress – Webinar System for WordPressv5
Range: 0
WordPress/Webinarpresswp-canonicalize

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/3216237/wp-webinarsystem/trunk/includes/class-webinarsysteem-ajax.phpnvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/88508dbd-b7a0-441d-918b-f4cb7a7cd000nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000