Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-25614 EUVD-2022-30274GHSA-f3xh-wxr3-c9w3

WordPress eRoom plugin <= 1.3.7 - Cross-Site Request Forgery (CSRF) leading to Sync with Zoom Meetings vulnerability

Published Apr 11, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.7 allows an attacker to Sync with Zoom Meetings.

Affected products

VendorProductAffectedFixed
StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.7 – ≤ 1.3.7 —

References