Aller au contenu
Se connecter
7.5 Élevée

CVE-2026-1368 The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce…

Description

The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce verification commented out, allowing unauthenticated attackers to generate valid Zoom SDK signatures for any meeting ID and retrieve the site's Zoom SDK key.

Produits et versions touchés

Produit Versions touchées Corrigé en
Video Conferencing with Zoom 4.6 premières → < 4.6.6 4.6.6

Autres CVE de Video Conferencing with Zoom

Les 3 CVE de Video Conferencing with Zoom →
CVE-2022-4578 The Video Conferencing with Zoom WordPress plugin before 4.0.10 does not validate and escape some of its shortcode… 5.4 Moyenne CVE-2022-0384 The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users… Non notée
Suivre cette CVE