Aller au contenu
Se connecter
Non notée

CVE-2022-0384 The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users…

Description

The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog

Produits et versions touchés

Produit Versions touchées Corrigé en
Video Conferencing with Zoom 3.8 premières → < 3.8.17 3.8.17

Autres CVE de Video Conferencing with Zoom

Les 3 CVE de Video Conferencing with Zoom →
CVE-2026-1368 The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce… 7.5 Élevée CVE-2022-4578 The Video Conferencing with Zoom WordPress plugin before 4.0.10 does not validate and escape some of its shortcode… 5.4 Moyenne
Suivre cette CVE