eRoom – Zoom Meetings & Webinars

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   eRoom – Zoom Meetings & Webinars

Information

Software Type Plugin
Software Slug eroom-zoom-meetings-webinar (view on wordpress.org)
Software Status Active
Software Author stylemix
Software Website wordpress.org
Software Downloads 478,941
Software Active Installs 10,000
Software Record Last Updated April 29, 2024

6 Vulnerabilities

Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
6.1
CVE-2023-33999
Jul 18, 2023
Researcher: Rafie Muhammad
eRoom – Zoom Meetings & Webinar <= 1.3.7 - Unauthorized Setting Update
5.4
CVE ID Unknown
Apr 6, 2022
Researcher: Unknown
eRoom – Zoom Meetings & Webinar <= 1.4.6 - Missing Authorization via stm_wpcfto_get_settings_callback
5.3
CVE-2022-43472
Mar 22, 2023
Researcher: István Márton
eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure
4.3
CVE-2024-3275
Apr 12, 2024
Researcher: Krzysztof Zając
eRoom – Zoom Meetings & Webinar <= 1.3.8 - Cross-Site Request Forgery
4.3
CVE-2022-25615
Apr 11, 2022
Researcher: Vladislav Pokrovsky (ΞX.MI)
eRoom – Zoom Meetings & Webinar <= 1.3.7 - Cross-Site Request Forgery
4.3
CVE-2022-25614
Apr 11, 2022
Researcher: Vladislav Pokrovsky (ΞX.MI)
Title CVE ID CVSS Researchers Date
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get CVE-2023-33999 6.1 Rafie Muhammad July 18, 2023
eRoom – Zoom Meetings & Webinar <= 1.3.7 - Unauthorized Setting Update 5.4 Unknown April 6, 2022
eRoom – Zoom Meetings & Webinar <= 1.4.6 - Missing Authorization via stm_wpcfto_get_settings_callback CVE-2022-43472 5.3 István Márton March 22, 2023
eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposure CVE-2024-3275 4.3 Krzysztof Zając April 12, 2024
eRoom – Zoom Meetings & Webinar <= 1.3.8 - Cross-Site Request Forgery CVE-2022-25615 4.3 Vladislav Pokrovsky (ΞX.MI) April 11, 2022
eRoom – Zoom Meetings & Webinar <= 1.3.7 - Cross-Site Request Forgery CVE-2022-25614 4.3 Vladislav Pokrovsky (ΞX.MI) April 11, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation