CVE-2025-31883

Summary

CVE-2025-31883 is a Cross-site Scripting (XSS) vulnerability affecting WPWebinarSystem's WebinarPress from versions n/a through 1.33.27. The flaw, referred to as Stored XSS, arises due to improper neutralization of user input during web page generation. Cybercriminals can exploit this issue to inject malicious scripts into a targeted user's web session, potentially leading to account takeover, data theft, or other malicious activities. Users are strongly advised to update their WebinarPress installation as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.