WP GoToWebinar
WP GoToWebinar has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 5 are fixed as of September 2026. Their average CVSS score is 5.1, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).
Every one of the 5 issues recorded for WP GoToWebinar has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (3) reported by Majed Refaea. WP GoToWebinar is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-38671WP GoToWebinar <= 15.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

WP GoToWebinar
Author
Northern Beaches Websites
WP GoToWebinar is a totally free plugin used to display upcoming webinars in a table, calendar or widget from your GoToWebinar account which link to registration forms on your website. By using simple shortcodes or the WPBakery Page Builder plugin you can place upcoming webinars or registration forms on any post or page with ease. As webinars pass and new webinars are created, the upcoming webinar display updates automatically each day making WP GoToWebinar a zero-maintenance experience. Use the shortcode [gotowebinar] to display webinars in a table format, [gotowebinar-calendar] to display webinars in a calendar format, [gotowebinar-reg key=”YOUR WEBINAR KEY”] to display a registration form for a specific webinar, or use [gotowebinar-reg key=”upcoming”] to show a registration form of your next upcoming webinar! There’s also a range of additional shortcode parameter that can be used which can: Only show webinars from a particular timezone Only show webinars if the webinar title contains or doesn’t contain particular text Only show webinars within the next X number of days Hide a certain phrase in the title from displaying Please checkout the plugin FAQ section for more information on the different shortcode parameters, or better yet use the WPBakery Page Builder plugin. WP GoToWebinar also enables your users to convert the times and dates of upcoming webinar displays and registration forms into their local timezone with a click of a link! Reduce spam registrations with Google reCaptcha support. Translate/customise standard registration form fields and create dynamic success and error messages for your users simply and quickly. Customise colours of various elements and enable hover tooltips to provide additional information to your users on upcoming webinars and registration forms. WP GoToWebinar is mobile friendly, implements smart caching to make loading times super fast and it’s also unobtrusive so it should adapt fairly well to your themes existing styles. Using our 1-click GoToWebinar authentication process and simple user interface you’ll have things up and running in no time! Watch a full walkthrough of all these features in this video here: Want to create, manage and sell upcoming and previously recorded webinars from WordPress? Or how about integrate your registrattion forms with email marketing and CRM packages including: ActiveCampaign, Agile CRM, Campaign Monitor, Constant Contact, Highrise, Hubspot, Insightly, MailChimp, Pipedrive, Salesforce and Zoho? Want to get webinar performance information from WordPress? Or what about displaying a live webinar countdown in the toolbar of your website! Upgrade to WP GoToWebinar Pro today to experience true GoToWebinar-WordPress awesomeness! Learn more here: https://plugins.northernbeacheswebsites.com.au/wp-gotowebinar-pro or watch the below video: Please show your support for this plugin by donating what you can via the plugin settings page as your support will contribute to support and new features!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C