Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-13
Webinar Ignition - Security Vulnerability (CVE-2026-105880)
Authorization Bypass Through User-Controlled Key vulnerability in Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarIgnition: from n/a through 4.27.125.
PLUGIN
Webinar Ignition
CVE-2026-105880
Risk Score
Threat Entry
Updated 2026-06-17
Webinar Ignition - Path Traversal (CVE-2026-42757)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Path Traversal.This issue affects WebinarIgnition: from n/a through < 4.08.253.
PLUGIN
Webinar Ignition
CVE-2026-42757
Risk Score
Threat Entry
Updated 2026-06-17
Webinar Ignition - Privilege Escalation (CVE-2026-42758)
Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Privilege Escalation.This issue affects WebinarIgnition: from n/a through < 4.08.253.
PLUGIN
Webinar Ignition
CVE-2026-42758
Risk Score
Threat Entry
Updated 2026-06-17
Webinar Ignition - SQL Injection (CVE-2026-40797)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saleswonder LLC WebinarIgnition allows Blind SQL Injection. This issue affects WebinarIgnition: from n/a through 4.08.253.
PLUGIN
Webinar Ignition
CVE-2026-40797
Risk Score
Threat Entry
Updated 2026-06-17
Webinar Ignition - Broken Access Control (CVE-2025-60088)
Missing Authorization vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarIgnition: from n/a through
PLUGIN
Webinar Ignition
CVE-2025-60088
Risk Score
Threat Entry
Updated 2026-06-17
Webinar Ignition - Authentication Bypass (CVE-2025-6441)
The Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition plugin for WordPress is vulnerable to unauthenticated login token generation due to a missing capability check on the `webinarignition_sign_in_support_staff` and `webinarignition_register_support` functions in all versions up to, and including, 4.03.32. This makes it possible for unauthenticated attackers to generate login tokens for arbitrary WordPress users under certain circumstances, issuing authorization cookies which can lead to authentication bypass.
PLUGIN
Webinar Ignition
CVE-2025-6441
Risk Score