CVE-2026-39653
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
The Video Conferencing with Zoom WordPress plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 4.6.6.
Risk Assessment
An unauthorized user can access conference management functions, potentially leading to data leakage or service disruption.
Recommendation
Update the Video Conferencing with Zoom plugin to the latest version and review permission settings.
Original NVD description (English source)
Missing Authorization vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Video Conferencing with Zoom: from n/a through <= 4.6.6.