Skip to content
Sign in
Not rated

CVE-2022-0384 The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users…

Description

The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog

Affected products and versions

Product Affected versions Fixed in
Video Conferencing with Zoom 3.8 earliest → < 3.8.17 3.8.17

Other CVEs of Video Conferencing with Zoom

The 3 CVEs of Video Conferencing with Zoom →
CVE-2026-1368 The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce… 7.5 High CVE-2022-4578 The Video Conferencing with Zoom WordPress plugin before 4.0.10 does not validate and escape some of its shortcode… 5.4 Medium
Track this CVE