WordPress plugin
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium12
- Low0
All eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Zoom API Credential Modification ≤1.7.1Update to 1.7.2 | CVE-2026-114175 | |
| Medium4.3 | Missing Authorization ≤1.7.1Update to 1.7.2 | CVE-2026-114176 | |
| Medium5.3 | Missing Authorization ≤1.7.1Update to 1.7.2 | CVE-2026-62038 | |
| Medium6.5 | Authenticated (Contributor+) SQL Injection ≤1.7.1Update to 1.7.2 | CVE-2026-25405 | |
| Medium4.3 | Missing Authorization ≤1.7.1Update to 1.7.2 | CVE-2026-25427 | |
| High7.5 | Unauthenticated Information Exposure ≤1.5.6Update to 1.5.7 | CVE-2025-49919 | |
| Medium5.3 | Unauthenticated Sensitive Information Exposure ≤1.5.6Update to 1.5.7 | CVE-2025-11760 | |
| Medium4.3 | Missing Authorization to Information Exposure ≤1.4.18Update to 1.4.19 | CVE-2024-3275 | |
| Medium6.1 | Reflected Cross-Site Scripting via fs_request_get ≤1.9.2No patch available | CVE-2023-33999 | |
| Medium5.3 | Missing Authorization via stm_wpcfto_get_settings_callback ≤1.4.6Update to 1.4.7 | CVE-2022-43472 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.3.8Update to 1.3.9 | CVE-2022-25615 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.3.7Update to 1.3.8 | CVE-2022-25614 | |
| Medium5.4 | Unauthorized Setting Update ≤1.3.7Update to 1.3.8 | — |
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Zoom API Credential Modification
≤1.7.1Update to 1.7.2
- Medium4.3Missing Authorization
≤1.7.1Update to 1.7.2
- Medium5.3Missing Authorization
≤1.7.1Update to 1.7.2
- Medium6.5Authenticated (Contributor+) SQL Injection
≤1.7.1Update to 1.7.2
- Medium4.3Missing Authorization
≤1.7.1Update to 1.7.2
- High7.5Unauthenticated Information Exposure
≤1.5.6Update to 1.5.7
- Medium5.3Unauthenticated Sensitive Information Exposure
≤1.5.6Update to 1.5.7
- Medium4.3Missing Authorization to Information Exposure
≤1.4.18Update to 1.4.19
- Medium6.1Reflected Cross-Site Scripting via fs_request_get
≤1.9.2No patch available
- Medium5.3Missing Authorization via stm_wpcfto_get_settings_callback
≤1.4.6Update to 1.4.7
- Medium4.3Cross-Site Request Forgery
≤1.3.8Update to 1.3.9
- Medium4.3Cross-Site Request Forgery
≤1.3.7Update to 1.3.8
- Medium5.4Unauthorized Setting Update
≤1.3.7Update to 1.3.8
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams: common questions
Does eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams: 1 high, 12 medium. At least one is not fixed in the latest version.
How do I check which version of eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams vulnerability?
CVE-2026-114175, published Oct 22, 2026: eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization to Authenticated (Subscriber+) Zoom API Credential Modification. Severity: Medium (CVSS 4.3).
Is any eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams vulnerability listed in CISA KEV?
No. None of the known eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams vulnerabilities is currently listed in the CISA KEV catalog.