Known Vulnerabilities
CVE-2024-38695
Missing Authorization vulnerability in Martin Gibson WP GoToWebinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP GoToWebinar: from n/a through 15.6.
MEDIUM
CVSS 4.3
Published Nov 01, 2024
CVE-2024-38776
Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson WP GoToWebinar allows Cross-Site Scripting (XSS).This issue affects WP GoToWebinar: from n/a through 15.7.
HIGH
CVSS 7.1
Published Aug 02, 2024
CVE-2024-38671
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson WP GoToWebinar allows Stored XSS.This issue affects WP GoToWebinar: from n/a through 15.7.
MEDIUM
CVSS 6.5
Published Jul 20, 2024