PT-2026-43665 · Unknown · Webinarignition

Tobias · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-42757

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebinarIgnition versions prior to 4.08.253

Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, exists in the software. This allows access to files or directories outside of the intended restricted folder.

Recommendations Update to version 4.08.253 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-42757

Affected Products

Webinarignition

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-42757 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/webinar-ignition/vulnerability/wordpress-webinarignition-plugin-4-08-253-arbitrary-file-deletion-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/55105 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2059705828500750428 · Twitter Post