Medium severity4.3NVD Advisory· Published May 2, 2024· Updated Apr 15, 2026

CVE-2024-3275

Description

The eRoom – Zoom Meetings & Webinars plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.18 via the search_posts function. This makes it possible for authenticated attackers, with subscriber access and higher, to obtain post excerpts including those of draft and pending posts.

Affected products

WordPress/Eroom Zoom Meetings Webinarinferred
Range: <=1.4.18
Package: https://wordpress.org/plugins/eroom-zoom-meetings-webinar
EMC Corporation/Eroomllm-fuzzy
Range: <=1.4.18

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changesetnvd
www.wordfence.com/threat-intel/vulnerabilities/id/60e0fd59-a69c-4ddf-80cd-4312d2689397nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000