Medium severity4.3NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026
CVE-2024-2033
CVE-2024-2033
Description
The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.4.5 via the get_assign_host_id AJAX action. This makes it possible for authenticated attackers, with subscriber access or higher, to enumerate usernames, emails and IDs of all users on a site.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=4.4.5+ 1 more
- (no CPE)range: <=4.4.5
- (no CPE)range: <=4.4.5
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.