Video Conferencing with Zoom vulnerabilities

The Video Conferencing with Zoom WordPress plugin contains an insertion of sensitive information into sent data vulnerability, allowing retrieval of embedded sensitive data. The issue affects versions up to and including 4.6.10.

Cross Site Scripting (XSS) vulnerability in Video Conferencing with Zoom in versions up to 4.6.8. A user with Contributor role can inject malicious script.

The Video Conferencing with Zoom WordPress plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 4.6.6.