Sensitive Information Exposure in Video Conferencing Plugin for WordPress

CVE-2023-3947

What is CVE-2023-3947?

The Video Conferencing with Zoom plugin for WordPress has a serious flaw due to the presence of a hardcoded encryption key in the 'vczapi_encrypt_decrypt' function. This vulnerability allows unauthorized attackers to exploit the weakness and potentially decrypt sensitive information, such as meeting IDs and passwords. Versions up to and including 4.2.1 are impacted, making it crucial for WordPress users to assess their security and apply necessary updates.

References