CVE Intelligence
Analysis AI-assisted

CVE-2026-40797: WebinarIgnition WordPress Plugin - SQL Injection

A SQL injection flaw in the WebinarIgnition WordPress plugin by Saleswonder LLC allows blind SQL injection in versions through 4.08.253. The CNA Patchstack rates it critical with a CVSS 3.1 base score of 9.3. The record lists no fixed version and no confirmed exploitation.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

The WebinarIgnition plugin for WordPress, published by Saleswonder LLC, contains a SQL injection flaw (CWE-89) that allows blind SQL injection. The record was published on 2026-05-05 and the CVE was assigned by Patchstack as CNA.

Impact

  • The CNA scored the issue 9.3 (Critical) under CVSS 3.1, with network attack vector, low complexity, no privileges and no user interaction required.
  • The recorded vector shows high confidentiality impact, no integrity impact, low availability impact and a changed scope.
  • SSVC data in the record lists technical impact as partial and the issue as automatable.

Affected products and versions

  • Saleswonder LLC WebinarIgnition, versions through 4.08.253 according to the record.
  • The record does not list a fixed version. This does not mean no fix exists; check the vendor and the Patchstack entry for updates.

Exploitation status

  • This CVE is not listed in the CISA KEV catalog in the record, so active exploitation is not confirmed by that source.
  • No confirmed exploitation appears in the sources consulted for this analysis.
  • SSVC exploitation is recorded as none, and the EPSS probability is 0.004 (about 0.4%).

Remediation and mitigation

  • Inventory all WebinarIgnition installations and record their exact versions.
  • Check the vendor and the Patchstack entry for a fixed release and apply it as soon as it is confirmed.
  • Until a fix is verified, reduce exposure where feasible by limiting access to the plugin and removing it if it is not required.
  • Keep WordPress core and other plugins updated, and use database accounts with least privilege.

Detection guidance

  • Review web server and application logs for unusual parameters or repeated requests directed at WebinarIgnition components.
  • Monitor database error logs and abnormal response timing that could indicate injection attempts.
  • Consider a web application firewall with SQL injection rules, tuned to limit false positives on legitimate traffic.

Limitations of the available information

  • The record does not list fixed versions, the lower bound of affected versions (the description states n/a), or the vulnerable endpoints.
  • No NVD score appears in the record; the 9.3 score is the CNA score from Patchstack.
  • The EPSS date in the record is later than the publication date, so the EPSS figure should be interpreted with caution.
  • Sources consulted did not provide vendor advisory text.

Frequently asked questions

Is this WebinarIgnition vulnerability being actively exploited?

The record does not list this CVE in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted. SSVC exploitation is recorded as none.

Is a fixed version of WebinarIgnition available?

The record does not list a fixed version. That is unknown rather than proof that no fix exists, so check the vendor and the Patchstack entry for updates.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.