cleantalk
Vulnerabilities and Security Researches

eRoom – Zoom Meetings & Webinars, CVE-2024-3275

CVE, Research URL

CVE-2024-3275

Published on
May 02, 2024
Research Description
The eRoom – Zoom Meetings & Webinars plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.18 via the search_posts function. This makes it possible for authenticated attackers, with subscriber access and higher, to obtain post excerpts including those of draft and pending posts.
Affected versions
max 1.4.19.
Status
vulnerable