Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-31883 EUVD-2025-9152GHSA-jpj3-4vjw-5jmq

WordPress WebinarPress plugin <= 1.33.28 - Cross Site Scripting (XSS) vulnerability

Published Apr 1, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Stored XSS.This issue affects WebinarPress: from n/a through <= 1.33.28.

Affected products

VendorProductAffectedFixed
WPWebinarSystem WebinarPress ≤ 1.33.28 —

References