CVE-2025-6441 Auth bypass in WebinarIgnition – Live, Automated & Evergreen Webinars for WooCommerce
Unauthenticated attackers can generate login tokens for arbitrary users, leading to authentication bypass and account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-6441?
CVE-2025-6441 is a critical authentication bypass vulnerability in tobias_conrad WebinarIgnition – Live, Automated & Evergreen Webinars for WooCommerce, published on 24 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition plugin for WordPress is vulnerable to unauthenticated login token generation due to a missing capability check on the `webinarignition_sign_in_support_staff` and `webinarignition_register_support` functions in all versions up to, and including, 4.03.32. This makes it possible for unauthenticated attackers to generate login tokens for arbitrary WordPress users under certain circumstances, issuing authorization cookies which can lead to authentication bypass.
Weakness: CWE-862
Which versions are affected by CVE-2025-6441?
How do I fix CVE-2025-6441?
No fix has been published for CVE-2025-6441 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-6441 being exploited?
There is no known exploitation of CVE-2025-6441 in the wild and no public exploit code.
Sources
Also known as GHSA-84fw-vffg-g7cp.