Known vulnerabilities in WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce

Free unlimited live, automated & evergreen webinars on your own site. 500 visitors, zero sales? Sell live, right in the room.

10Reported vulnerabilities

9.8Highest CVSS score

4.16.1Latest version

60+Active installs

What to do now

Update WebinarIgnition – Live, Automated & Evergreen Webinar System also for WooCommerce to 4.08.253 or later. 10 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 11, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-6441	Critical 9.8	1.0%	0 to 4.03.32 (inclusive)	`4.03.33`	July 24, 2025
CVE-2026-42758	Critical 9.8	0.3%	Before 4.08.253	`4.08.253`	May 30, 2026
CVE-2023-51424	Critical 9.8	0.7%	3.05.0 and earlier	`3.05.1`	December 27, 2023
CVE-2023-51423	Critical 9.8	0.6%	3.05.0 and earlier	`3.05.1`	December 27, 2023
CVE-2026-42757	High 8.1	0.4%	Before 4.08.253	`4.08.253`	May 30, 2026
CVE-2023-51422	High 7.5	0.6%	3.05.4 and earlier	`3.05.5`	December 27, 2023
CVE-2026-40797	High 7.5	0.4%	Before 4.09.86	`4.09.86`	May 4, 2026
CVE-2023-25023	Medium 4.4	0.4%	2.14.2 and earlier	`2.14.3`	February 3, 2023
CVE-2025-60088	Medium 4.3	0.3%	4.06.04 and earlier	`4.06.05`	August 10, 2025
CVE-2024-32445	Medium 4.3	0.2%	3.05.8 and earlier	`3.06.0`	April 12, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.