Vulnerabilities / Zoom for WordPress
Zoom for WordPress vulnerabilities
Advisories WPSec published for wp-zoom. Other sources may list more. Its attack surface: Zoom for WordPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0338 | Zoom for WordPress <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Webinar and Product Data Exposure via AJAX Actions | Medium 4.3 | 1.6.0 |
| 2026-10-02 | WPSEC-2026-0337 | Zoom for WordPress <= 1.5.4 - Missing Authorization to Unauthenticated Zoom Connection Reset and OAuth Token Overwrite | Medium 6.5 | 1.6.0 |
| 2026-10-02 | WPSEC-2026-0336 | Zoom for WordPress <= 1.5.4 - Unauthenticated Sensitive Information Exposure via Publicly Accessible Log Files | Medium 5.3 | 1.6.0 |
| 2026-10-02 | WPSEC-2026-0335 | Zoom for WordPress <= 1.5.4 - Cross-Site Request Forgery to Zoom OAuth Token Overwrite | Medium 4.3 | 1.6.0 |
License: CC BY 4.0