Authorization Bypass in WebinarIgnition by Tobias

CVE-2026-105880

What is CVE-2026-105880?

An authorization bypass vulnerability exists in the WebinarIgnition plugin by Tobias, affecting specific versions. The flaw stems from incorrectly configured access control security levels, allowing unauthorized users to exploit the platform by leveraging user-controlled keys. This issue compromises the integrity of access control mechanisms in the product, opening it up to potential abuse, which can pose significant risks to both the users and the platform's overall security. It is crucial for users of affected versions to review their configurations and apply necessary mitigations.

References