{
 "id": "WPSEC-2026-0546",
 "url": "https://wpsec.com/vuln/WPSEC-2026-0546/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-0546/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-0546/index.md",
 "title": "WebinarPress <= 1.33.30 - Unauthenticated Missing Authorization to Multiple AJAX Actions",
 "description": "The WebinarPress plugin for WordPress is vulnerable to unauthorized modification and access of data in versions 1.30 up to, and including, 1.33.30 due to missing capability checks on several AJAX actions registered for unauthenticated users (unraise-hands, show-cta, action-box-status, set_hand_raising_enabled and get-drip-campaigns), which were protected only by a nonce exposed to all visitors on public webinar pages or by no check at all. This makes it possible for unauthenticated attackers to lower all raised attendee hands, show or hide a webinar's call-to-action and action box, enable or disable hand raising on any webinar, and list Drip campaigns using the site's stored Drip API key.",
 "plugin": {
  "slug": "wp-webinarsystem",
  "name": "WebinarPress",
  "full_name": "WebinarPress – Webinar System for WordPress",
  "wordpress_org": "https://wordpress.org/plugins/wp-webinarsystem/",
  "advisories_url": "https://wpsec.com/vuln/plugin/wp-webinarsystem/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/wp-webinarsystem"
 },
 "type": "NO AUTHORISATION",
 "cwe": [
  "CWE-862"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 6.5,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": "1.30",
    "from_inclusive": true,
    "to": "1.33.31",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 1.30 before 1.33.31"
  ]
 },
 "introduced_in": "1.30",
 "fixed_in": "1.33.31",
 "remediation": "Update to 1.33.31 or later.",
 "fix_released": "2026-10-06T05:01:27+00:00",
 "published": "2026-10-07T14:47:02+00:00",
 "updated": "2026-10-07T13:54:54.861364+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-0546/",
  "https://plugins.svn.wordpress.org/wp-webinarsystem/tags/1.33.31/",
  "https://wordpress.org/plugins/wp-webinarsystem/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/wp-webinarsystem",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-10-07"
 }
}