Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Video Conferencing with Zoom plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.6.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to obtain the site's Zoom SDK API key and a freshly-signed JWT that can be used with the Zoom Web SDK to join any Zoom meeting associated with those credentials without a legitimate invitation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-6964 Authorization Bypass in Video Conferencing with Zoom Plugin for WordPress 4.6.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6964
Post summary
The text announces CVE-2026-6964, an authorization bypass vulnerability in the Zoom Video Conferencing plugin for WordPress 4.6.7, but provides no PoC, exploit, or patch information.