The vulnerability identified as CVE-2025-32693 affects the WebinarPress plugin by WPWebinarSystem. It is an open redirect issue where URLs can be manipulated to redirect users to untrusted sites. This can be leveraged for phishing attacks by deceiving users into visiting malicious websites. The vulnerability affects versions up to and including 1.33.28. The CVSS 3.1 base score is 4.7, indicating medium severity, with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and limited confidentiality impact. No patch or vendor advisory is currently available to confirm remediation status.

The impact of this vulnerability is limited to potential phishing attacks via URL redirection to untrusted sites. There is no direct impact on data integrity or availability. Confidentiality impact is low as per the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when clicking on links generated by the affected WebinarPress plugin and consider implementing URL validation or filtering at the application or network level to prevent open redirects.