Approved changes feed: RSS · Atom

cpe:2.3:a:saleswonder_team:_tobias:webinarignition:*:*:*:*:*:*:*:*

part: a version: webinarignition update: *

VendorSaleswonder Team (6180b8e7-4a05-5432-8b2d-a982d9bbcffc)
ProductTobias (ec900f72-81c7-5c1a-9d9e-d0d56a9bfbf7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42758 vulnerable 2026-06-08 08:03:16.659207 WordPress WebinarIgnition plugin < 4.08.253 - Privilege Escalation vulnerability
CRITICAL (9.8)
Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Privilege Escalation.This issue affects WebinarIgnition: from n/a through < 4.08.253.
Published: 2026-05-27T09:49:05.837Z
Updated: 2026-05-27T10:47:59.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42757 vulnerable 2026-06-08 08:03:16.658928 WordPress WebinarIgnition plugin < 4.08.253 - Arbitrary File Deletion vulnerability
CRITICAL (9.9)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Path Traversal.This issue affects WebinarIgnition: from n/a through < 4.08.253.
Published: 2026-05-27T09:49:05.746Z
Updated: 2026-05-27T10:48:27.794Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-60088 vulnerable 2026-06-08 07:37:26.599975 WordPress WebinarIgnition plugin <= 4.06.04 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarIgnition: from n/a through <= 4.06.04.
Published: 2025-12-18T07:22:08.134Z
Updated: 2026-04-28T18:37:41.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32445 vulnerable 2026-06-08 06:35:33.135904 WordPress WebinarIgnition plugin <= 3.05.8 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition.This issue affects WebinarIgnition: from n/a through <= 3.05.8.
Published: 2024-04-15T07:58:47.663Z
Updated: 2026-04-28T16:09:35.580Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.