130 matches found
CVE-2026-25427
CVE-2026-25427 affects the WordPress plugin eRoom (versions ≤ 1.7.1). The description identifies a Broken Access Control issue for subscribers, but the available documents do not provide technical details, affected files, root cause, exploitability, or remediation steps. No exploitation informati...
EUVD-2026-48149
Subscriber Broken Access Control in eRoom = 1.7.1 versions...
EUVD-2026-48147
Contributor SQL Injection in eRoom = 1.7.1 versions...
CVE-2026-25405 WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability
Contributor SQL Injection in eRoom = 1.7.1 versions...
CVE-2026-25405
CVE-2026-25405 affects the WordPress eRoom plugin (≤ 1.7.1). It is a reported SQL Injection vulnerability. CVSSv3.1: 8.5 (HIGH), NETWORK, LOW privileges, no user interaction, confidentiality impact HIGH, integrity and availability variances (I: NONE, A: LOW), scope changed. Connected documents pr...
WordPress eRoom - Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin <= 1.5.6 - Unauthenticated Sensitive Information Exposure vulnerability
WordPress eRoom - Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin = 1.5.6 - Unauthenticated Sensitive Information Exposure vulnerability discovered by Rafshanzani Suhada in WordPress Plugin eRoom versions = 1.5.6...
CVE-2025-49919
Insertion of Sensitive Information Into Sent Data vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Retrieve Embedded Sensitive Data.This issue affects eRoom: from n/a through = 1.5.6...
EUVD-2025-204227
Insertion of Sensitive Information Into Sent Data vulnerability in WPCenter eRoom eroom-zoom-meetings-webinar allows Retrieve Embedded Sensitive Data.This issue affects eRoom: from n/a through = 1.5.6...
CVE-2025-49919
Insertion of Sensitive Information Into Sent Data vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Retrieve Embedded Sensitive Data.This issue affects eRoom: from n/a through = 1.5.6...
CVE-2025-49919
CVE-2025-49919 is a vulnerability in the WordPress plugin “eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams” (WPCenter eRoom) rated as Medium (CVSS 3.1: 5.8). Affected versions: eRoom up to 1.5.6. Description in the initial document: Insertion of Sensitive Information Into ...
CVE-2025-49919 WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Retrieve Embedded Sensitive Data.This issue affects eRoom: from n/a through = 1.5.6...
CVE-2025-49919 WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Retrieve Embedded Sensitive Data.This issue affects eRoom: from n/a through = 1.5.6...
WordPress plugin eRoom 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
PT-2025-52019
Name of the Vulnerable Software and Affected Versions WPCenter eRoom versions through 1.5.6 Description A flaw exists in WPCenter eRoom eroom-zoom-meetings-webinar that allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendation...
WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Mohamad Fattyr in WordPress Plugin eRoom versions = 1.5.6...
WordPress plugin eRoom 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
CVE-2025-11760
The eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin for WordPress is vulnerable to exposure of sensitive information in all versions up to, and including, 1.5.6. This is due to the plugin exposing Zoom SDK secret keys in client-side JavaScript within the meeting vie...
CVE-2025-11760
CVE-2025-11760 affects the WordPress plugin “eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams” through version 1.5.6. The root cause is exposure of the Zoom SDK secret keys in client-side JavaScript in the meeting view template, enabling unauthenticated attackers to extract...
EUVD-2025-35900
The eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin for WordPress is vulnerable to exposure of sensitive information in all versions up to, and including, 1.5.6. This is due to the plugin exposing Zoom SDK secret keys in client-side JavaScript within the meeting vie...
CVE-2025-11760 eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.5.6 - Unauthenticated Sensitive Information Exposure
The eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin for WordPress is vulnerable to exposure of sensitive information in all versions up to, and including, 1.5.6. This is due to the plugin exposing Zoom SDK secret keys in client-side JavaScript within the meeting vie...