Video Conferencing With Zoom
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:video_conferencing_with_zoom:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Video Conferencing With Zoom (0fd23fd9-817f-5386-8c0d-c9a2fc96cd43) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1368 |
vulnerable | 2026-06-08 07:49:08.436916 |
Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation
The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce verification commented out, allowing unauthenticated attackers to generate valid Zoom SDK signatures for any meeting ID and retrieve the site's Zoom SDK key.
Published: 2026-02-18T06:00:09.953Z
Updated: 2026-02-18T14:02:28.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4578 |
vulnerable | 2026-06-08 05:51:59.918221 |
Video Conferencing with Zoom < 4.0.10 - Contributor+ Stored XSS
The Video Conferencing with Zoom WordPress plugin before 4.0.10 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Published: 2023-01-16T15:38:08.777Z
Updated: 2025-04-08T20:10:58.814Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0384 |
vulnerable | 2026-06-08 05:39:09.922695 |
Video Conferencing with Zoom < 3.8.17 - E-mail Address Disclosure
The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog
Published: 2022-03-07T08:16:29.000Z
Updated: 2024-08-02T23:25:40.210Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.