CVE-2025-60088
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Missing Authorization vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WebinarIgnition: from n/a through <= 4.06.04.
Risk Assessment
The risk is unauthorized access to plugin functionality, potentially leading to data confidentiality or integrity breaches.
Recommendation
Upgrade the WebinarIgnition plugin to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in WebinarIgnition
See all- CVE-2026-42758Critical
CVE-2026-42758 describes an incorrect privilege assignment vulnerability in WebinarIgnition that allows privilege escalation. This issue affects WebinarIgnition from n/a through below 4.08.253.
- CVE-2026-42757Critical
CVE-2026-42757 describes an improper limitation of a pathname to a restricted directory, leading to a 'Path Traversal' vulnerability in the WebinarIgnition application. This issue affects versions from n/a to below 4.08.253.
Original NVD description (English source)
Missing Authorization vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarIgnition: from n/a through <= 4.06.04.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS