Read the docs

Imdpen

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Imdpen records in CISA KEV

No Imdpen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Video Conferencing With Zoom 3 records LOW

Records

3 records

TI-2024-01891 CVE-2024-2031 · GHSA-343p-q3gf-xrfx

Video Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 28

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zoom_recordings_by_meeting' shortcode in all versions up to, and including, 4.4.4 due to insufficient i…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0032 Published 2024-03-12 No fix listed CWE-79
TI-2023-03669 CVE-2023-3947 · GHSA-66rr-38w2-26rv

Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure

Priority LOW 24

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'vczapi_encrypt_decrypt' function in versions up to, and including, 4.2.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00398 Published 2023-07-26 No fix listed CWE-321
TI-2022-00309 CVE-2022-0384 · GHSA-whpj-8vvw-fc5h

Video Conferencing with Zoom < 3.8.17 - E-mail Address Disclosure

Priority LOW 22

The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users AJAX action, allowing any authenticated users, such as subscriber to download the list of email addre…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01005 Published 2022-03-07 Fixed in 3.8.17 CWE-200
Open these records in search →