Skip to content
OpenAdvisories

Vendor

j_3rk

5 known vulnerabilities.

Products

Video Conferencing with Zoom 4 Inactive Logout 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-6964

    Video Conferencing with Zoom <= 4.6.7 - Missing Authorization to Unauthenticated Zoom SDK Credential Exposure via 'get_auth' AJAX Action

    The Video Conferencing with Zoom plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.6.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible fo…

    j_3rk Video Conferencing with Zoom Web / CMS
  • Medium 6.4
    CVE-2025-11922

    Inactive Logout <= 3.5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    The Inactive Logout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ina_redirect_page_individual_user' parameter in all versions up to, and including, 3.5.5 due to insufficient input sanitization and output escaping. This makes it p…

    j_3rk Inactive Logout Web / CMS
  • Medium 4.3
    CVE-2024-2033

    Video Conferencing with Zoom <= 4.4.5 - Sensitive Information Exposure

    The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the get_assign_host_id AJAX action. This makes it possible for authenticated attackers, with subscriber acces…

    j_3rk Video Conferencing with Zoom Web / CMS
  • Medium 6.4
    CVE-2024-2031

    Video Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Video Conferencing with Zoom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zoom_recordings_by_meeting' shortcode in all versions up to, and including, 4.4.4 due to insufficient input sanitization and output escaping o…

    j_3rk Video Conferencing with Zoom Web / CMS