CVE-2026-103335
MediumCVSS 5.3Summary
The Video Conferencing with Zoom WordPress plugin contains an insertion of sensitive information into sent data vulnerability, allowing retrieval of embedded sensitive data. The issue affects versions up to and including 4.6.10.
Risk Assessment
Sensitive data may be exposed in sent data, potentially leading to information leakage or privacy breaches for users.
Recommendation
Update the Video Conferencing with Zoom plugin to the latest version with a fix. Also review what data is sent in requests and responses.
Other vulnerabilities in Video Conferencing with Zoom
See all- CVE-2026-66641Medium
Cross Site Scripting (XSS) vulnerability in Video Conferencing with Zoom in versions up to 4.6.8. A user with Contributor role can inject malicious script.
- CVE-2026-39653Medium
The Video Conferencing with Zoom WordPress plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 4.6.6.
Original NVD description (English source)
Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Retrieve Embedded Sensitive Data.This issue affects Video Conferencing with Zoom: from n/a through 4.6.10.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS