Access Control Vulnerability in Deepen Bajracharya Video Conferencing Product by WordPress
CVE-2026-39653

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Video Conferencing With Zoom
Vendor
CVE Published:
8 April 2026

What is CVE-2026-39653?

A missing authorization vulnerability exists in the Deepen Bajracharya Video Conferencing plugin, affecting versions up to and including 4.6.6. This issue stems from incorrectly configured access control security levels, which may allow unauthorized users to gain access to restricted functionalities within the application. Affected users are advised to update to the latest version to mitigate the risk.

Affected Version(s)

Video Conferencing with Zoom 0 <= 4.6.6

References

https://patchstack.com/database/Wordpress/Plugin/video-co...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan | Patchstack Bug Bounty Program
.