CVE-2023-3947

Name of the Vulnerable Software and Affected Versions Video Conferencing with Zoom plugin for WordPress versions up to, and including, 4.2.1

Description The issue is related to Sensitive Information Exposure due to a hardcoded encryption key in the vczapi encrypt decrypt function. This allows unauthenticated attackers to decrypt and view the meeting id and password.

Recommendations For versions up to, and including, 4.2.1, update to a version that fixes the hardcoded encryption key issue in the vczapi encrypt decrypt function. As a temporary workaround, consider disabling the vczapi encrypt decrypt function until a patch is available.