Filtered by vendor Imdpen
Subscriptions
Filtered by product Video Conferencing With Zoom
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-0384 | 1 Imdpen | 1 Video Conferencing With Zoom | 2024-08-02 | 4.3 Medium |
| The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog | ||||
| CVE-2023-3947 | 1 Imdpen | 1 Video Conferencing With Zoom | 2024-08-02 | 3.7 Low |
| The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'vczapi_encrypt_decrypt' function in versions up to, and including, 4.2.1. This makes it possible for unauthenticated attackers to decrypt and view the meeting id and password. | ||||
Page 1 of 1.