WordPress security by component
eRoom
Plugin description
eRoom is a WordPress component with 7 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 8.5.
Plugin slug:
eroom-zoom-meetings-webinarLatest vulnerability
CVE-2026-25427: eRoom: A security weakness
eRoom is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 1.7.1.
| Safe version |
|
||
|---|---|---|---|
| Jul 23, 2026 |
CVE-2026-25427
eRoom: A security weakness
eRoom is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 1.7.1.
|
> 1.7.1 |
CVE5.4
NVDPending
|
| Jul 23, 2026 |
CVE-2026-25405
eRoom: SQL injection
eRoom is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is n/a through 1.7.1.
|
> 1.7.1 |
CVE8.5
NVDPending
|
| Dec 18, 2025 |
CVE-2025-49919
eRoom: A security weakness
eRoom is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.8
NVDPending
|
| Oct 25, 2025 |
CVE-2025-11760
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams: A security weakness
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Dec 13, 2024 |
CVE-2022-43472
eRoom – Zoom Meetings & Webinar: A security weakness
eRoom – Zoom Meetings & Webinar is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Apr 11, 2022 |
CVE-2022-25615
Eroom Zoom Meetings Webinar: Cross-site request forgery
Eroom Zoom Meetings Webinar is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD4.3
|
| Apr 11, 2022 |
CVE-2022-25614
Eroom Zoom Meetings Webinar: Cross-site request forgery
Eroom Zoom Meetings Webinar is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVD4.3
|