Video Conferencing With Zoom
Approved changes feed: RSS · Atom
cpe:2.3:a:j_3rk:video_conferencing_with_zoom:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | J 3Rk (197cb4ce-a505-5444-91d2-7fb486ef5b4e) |
|---|---|
| Product | Video Conferencing With Zoom (ab9416de-cb85-5a63-ae2d-f2bc551c0cf1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6964 |
vulnerable | 2026-07-29 01:06:21.367696 |
Video Conferencing with Zoom <= 4.6.7 - Missing Authorization to Unauthenticated Zoom SDK Credential Exposure via 'get_auth' AJAX Action
MEDIUM (5.3)
The Video Conferencing with Zoom plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.6.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to obtain the site's Zoom SDK API key and a freshly-signed JWT that can be used with the Zoom Web SDK to join any Zoom meeting associated with those credentials without a legitimate invitation.
Published: 2026-06-16T03:30:05.819Z
Updated: 2026-06-29T14:36:45.546Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2033 |
vulnerable | 2026-06-08 06:33:30.179987 |
Video Conferencing with Zoom <= 4.4.5 - Sensitive Information Exposure
MEDIUM (4.3)
The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the get_assign_host_id AJAX action. This makes it possible for authenticated attackers, with subscriber access or higher, to enumerate usernames, emails and IDs of all users on a site.
Published: 2024-04-09T18:58:30.782Z
Updated: 2026-04-08T16:34:28.797Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2031 |
vulnerable | 2026-06-08 06:33:30.175974 |
Video Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MEDIUM (6.4)
The Video Conferencing with Zoom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zoom_recordings_by_meeting' shortcode in all versions up to, and including, 4.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-03-12T19:32:29.141Z
Updated: 2026-04-08T16:33:50.149Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3947 |
vulnerable | 2026-06-08 06:09:40.869252 |
Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure
LOW (3.7)
The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'vczapi_encrypt_decrypt' function in versions up to, and including, 4.2.1. This makes it possible for unauthenticated attackers to decrypt and view the meeting id and password.
Published: 2023-07-26T03:34:28.251Z
Updated: 2026-04-08T17:18:11.535Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.