CVE-2023-3947

CVE-2023-3947 affects the WordPress plugin “Video Conferencing with Zoom”. A hardcoded encryption key in vczapi_encrypt_decrypt allows unauthenticated attackers to decrypt and view meeting IDs and passwords for versions up to and including 4.2.1. A fix is available in 4.2.2 (per PatchStack) and i...

CVE-2022-0384

The CVE-2022-0384 entry applies to the Video Conferencing with Zoom WordPress plugin prior to version 3.8.17. The vulnerability arises from lack of authorization in the vczapi_get_wp_users AJAX action, allowing any authenticated user (e.g., subscribers) to download the blog’s registered email add...

CVE-2024-2031

CVE-2024-2031 affects the Video Conferencing with Zoom plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) in the shortcode used by the plugin, specifically the zoom_recordings_by_meeting shortcode, and impacts all versions up to and including 4.4.4. Root cause per the ...