CVE-2022-0384: Video Conferencing with Zoom < 3.8.17 - E-mail Address Disclosure
The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapigetwpusers AJAX action, allowing any authenticated users, such as subscriber to download the list of email addresses registered on the blog
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-0384?
CVE-2022-0384 has a medium severity rating as it allows unauthorized access to sensitive email information.
How do I fix CVE-2022-0384?
To fix CVE-2022-0384, update the Video Conferencing with Zoom plugin to version 3.8.17 or later.
Who is affected by CVE-2022-0384?
CVE-2022-0384 affects any site using the Video Conferencing with Zoom WordPress plugin versions prior to 3.8.17.
What are the consequences of CVE-2022-0384?
The main consequence of CVE-2022-0384 is that any authenticated user can access and download the list of registered email addresses.
Is CVE-2022-0384 easily exploitable?
Yes, CVE-2022-0384 can be easily exploited by any authenticated users of the WordPress site.