CVE-2024-3275 eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure

The eRoom – Zoom Meetings & Webinars plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.18 via the searchposts function. This makes it possible for authenticated attackers, with subscriber access and higher, to obtain post excerpts...

CVE-2024-3275 eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure

The eRoom – Zoom Meetings & Webinars plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.18 via the searchposts function. This makes it possible for authenticated attackers, with subscriber access and higher, to obtain post excerpts...

PT-2024-24825 · WordPress · Eroom – Zoom Meetings & Webinar

Name of the Vulnerable Software and Affected Versions: The eRoom – Zoom Meetings & Webinars plugin for WordPress versions up to, and including, 1.4.18 Description: The issue allows authenticated attackers with subscriber access or higher to obtain post excerpts, including those of draft and pendi...

Video Conferencing with Zoom < 4.4.5 - Open Redirect

Description The Video Conferencing with Zoom plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 4.4.4. This is due to insufficient validation on a redirect url. This makes it possible for unauthenticated attackers to redirect users to potentially malicious...

CVE-2024-33584

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Deepen Bajracharya Video Conferencing with Zoom.This issue affects Video Conferencing with Zoom: from n/a through 4.4.4...

CVE-2024-33584 WordPress Video Conferencing with Zoom plugin <= 4.4.4 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Deepen Bajracharya Video Conferencing with Zoom.This issue affects Video Conferencing with Zoom: from n/a through 4.4.4...

CVE-2024-33584 WordPress Video Conferencing with Zoom plugin <= 4.4.4 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Deepen Bajracharya Video Conferencing with Zoom.This issue affects Video Conferencing with Zoom: from n/a through 4.4.4...

CVE-2024-33584

CVE-2024-33584 describes an Open Redirect vulnerability in the Video Conferencing with Zoom WordPress plugin. It affects the plugin from n/a up to and including version 4.4.4. The CVSS 3.1 score is 4.7 (Medium) with network attack vector, low complexity, no privileges, but user interaction requir...

WordPress plugin Video Conferencing with Zoom 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. An input validation error...

PT-2024-25352 · Zoom · Video Conferencing With Zoom

Name of the Vulnerable Software and Affected Versions: Video Conferencing with Zoom versions n/a through 4.4.4 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the Video Conferencing with Zoom...

WordPress Video Conferencing with Zoom plugin <= 4.4.4 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Video Conferencing with Zoom versions = 4.4.4...

WordPress Video Conferencing with Zoom Plugin <= 4.4.4 is vulnerable to Open Redirection

Software Video Conferencing with Zoom Type Plugin Vulnerable versions = 4.4.4 Fixed in 4.4.5 OWASP Top 10 A4: Insecure Design Classification Open Redirection CVE CVE-2024-33584 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 8244e481347a Credits Joshua Chan Required...

WordPress eRoom – Zoom Meetings & Webinar plugin <= 1.4.18 - Missing Authorization to Information Exposure vulnerability

Missing Authorization to Information Exposure vulnerability discovered by Krzysztof Zając in WordPress Plugin eRoom versions = 1.4.18...

CVE-2024-32454

Server-Side Request Forgery SSRF vulnerability in Wappointment Appointment Bookings for Zoom GoogleMeet and more – Wappointment.This issue affects Appointment Bookings for Zoom GoogleMeet and more – Wappointment: from n/a through 2.6.0...

CVE-2024-32454 WordPress Wappointment plugin <= 2.6.0 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Wappointment Appointment Bookings for Zoom GoogleMeet and more – Wappointment.This issue affects Appointment Bookings for Zoom GoogleMeet and more – Wappointment: from n/a through 2.6.0...

CVE-2024-32454

CVE-2024-32454 is an SSRF vulnerability in the WordPress plugin Appointment Bookings for Zoom, Google Meet, and related tools (Wappointment), affecting versions up to 2.6.0. It is an authenticated (Administrator+) issue that could enable server-side requests from the plugin. The Patch status indi...

WordPress eRoom – Zoom Meetings & Webinar Plugin <= 1.4.18 is vulnerable to Broken Access Control

Software eRoom – Zoom Meetings & Webinar Type Plugin Vulnerable versions = 1.4.18 Fixed in 1.4.19 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3275 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7f0c5109ca2f Credits Krzysztof...

eRoom – Zoom Meetings & Webinar < 1.4.19 - Missing Authorization to Information Exposure

Description The eRoom – Zoom Meetings & Webinars plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.18 via the searchposts function. This makes it possible for authenticated attackers, with subscriber access and higher, to obtain post...

The vulnerability of Zoom’s video conferencing software, related to insufficient validation of input data, allows attackers to disclose sensitive information that should be protected.

The vulnerability of Zoom video conferencing software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Zoom Desktop Client for Linux Cross-Site Scripting Vulnerability

Zoom Desktop Client for Linux is a client application designed for virtualized desktop environments such as Windows 365 Cloud PC. A cross-site scripting vulnerability exists in Zoom Desktop Client for Linux, which stems from the application's lack of effective filtering and escaping of...