All packages
eRoom vulnerabilities
3 known CVE vulnerabilities in eRoom, translated and rated.
- CVE-2026-62038High
Unauthenticated Broken Authentication in the eRoom plugin up to version 1.7.1. An attacker can bypass authentication mechanisms and gain unauthorized access.
- CVE-2026-25427Medium
The eRoom plugin versions up to 1.7.1 contain a broken access control vulnerability, allowing subscribers unauthorized access to functions reserved for higher roles.
- CVE-2026-25405High
The eRoom plugin version 1.7.1 and earlier contains an SQL Injection vulnerability exploitable by users with Contributor role.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS