Vulnerabilities

TI-2026-79208 CVE-2026-114175 · GHSA-6fj2-5cmf-jg2j

Missing authorization in WordPress eRoom plugin lets settings change

LOW 24

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00259 Published 2026-10-22 No fix listed CWE-862

TI-2026-78925 CVE-2026-114176 · GHSA-vgpc-9cfx-g8rq

Missing authorization in DigitalME eRoom WordPress plugin

LOW 20

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00267 Published 2026-10-21 No fix listed CWE-862

TI-2026-70381 CVE-2026-62038 · GHSA-wgrv-jcgv-cwvg

Broken authentication in WordPress eRoom plugin

LOW 38

Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00267 Published 2026-10-10 No fix listed CWE-288

TI-2026-20543 CVE-2026-25427 · GHSA-ggjw-gw38-xx97

WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability

LOW 24

Subscriber Broken Access Control in eRoom <= 1.7.1 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00287 Published 2026-07-23 No fix listed CWE-862

TI-2026-20523 CVE-2026-25405 · GHSA-32m9-v73v-vqc6

WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability

LOW 37

Contributor SQL Injection in eRoom <= 1.7.1 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-07-23 No fix listed CWE-89

TI-2025-31834 CVE-2025-49919 · GHSA-5xxr-4wwq-4pgv

WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability

LOW 25

Insertion of Sensitive Information Into Sent Data vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Retrieve Embedded Sensitive Data.This issue affects eRoom: from n/a through <= 1.5.6.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00198 Published 2025-12-18 No fix listed CWE-201