Eroom – Webinar & Meeting Plugin For Zoom, Google Meet, Microsoft Teams
Approved changes feed: RSS · Atom
cpe:2.3:a:digitalmeactivecampaign:eroom_–_webinar_&_meeting_plugin_for_zoom,_google_meet,_microsoft_teams:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Digitalmeactivecampaign (3905291b-a579-55ca-8a34-7a91bd3993e9) |
|---|---|
| Product | Eroom – Webinar & Meeting Plugin For Zoom, Google Meet, Microsoft Teams (775d569d-6763-541c-b970-d174d842fdfd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11760 |
vulnerable | 2026-06-08 07:04:28.888022 |
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.5.6 - Unauthenticated Sensitive Information Exposure
MEDIUM (5.3)
The eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin for WordPress is vulnerable to exposure of sensitive information in all versions up to, and including, 1.5.6. This is due to the plugin exposing Zoom SDK secret keys in client-side JavaScript within the meeting view template. This makes it possible for unauthenticated attackers to extract the sdk_secret value, which should remain server-side, compromising the security of the Zoom integration and allowing attackers to generate valid JWT signatures for unauthorized meeting access.
Published: 2025-10-25T01:45:55.977Z
Updated: 2026-04-08T16:34:54.332Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3275 |
vulnerable | 2026-06-08 06:41:52.859833 |
eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure
MEDIUM (4.3)
The eRoom – Zoom Meetings & Webinars plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.18 via the search_posts function. This makes it possible for authenticated attackers, with subscriber access and higher, to obtain post excerpts including those of draft and pending posts.
Published: 2024-05-02T16:52:09.413Z
Updated: 2026-04-08T16:56:40.995Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.