CVE-2026-114176: WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability
Published Oct 21, 2026
·Updated
Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1.
Affected Software
1 affected component
DigitalME eRoom<=1.7.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress eRoom pluginto a version that resolves this vulnerability.Fixed in 1.7.2
Event History
Oct 21, 2026
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The CVSS vector indicates that exploitation requires network access and low-level privileges. No user interaction is required.
2
What is the impact of successful exploitation?
Successful exploitation can affect integrity, while no confidentiality or availability impact is indicated by the supplied CVSS vector.
3
Which versions are affected?
DigitalME eRoom versions through 1.7.1 are affected. The available information does not identify a fixed version.