CVE-2025-6441 in Webinar Solution Plugin信息

摘要

由 VulDB • 2026-06-04

The Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition plugin for WordPress 存在未认证登录令牌生成的漏洞，原因是 `webinarignition_sign_in_support_staff` 和 `webinarignition_register_support` 函数中缺少能力检查（capability check），影响所有 4.03.31 及以下版本。在某些情况下，这使得未认证的攻击者能够为任意 WordPress 用户生成登录令牌，并签发授权 cookie，从而导致身份验证绕过。

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2025-06-20

披露

2025-07-24

管理

已接受

条目

VDB-317462

CPE

准备好

CWE

CWE-287 (已确认)

CVSS

7.3 (VulDB)

EPSS

0.00984

KEV

否

活动

非常低

部门

Hostingprovider

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-6441
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-6441
CVE Details	https://www.cvedetails.com/cve/CVE-2025-6441/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!