Access violation vulnerability in eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams 1.5.6

The eRoom plugin for WordPress, which allows users to host webinars and meetings using Zoom, Google Meet, and Microsoft Teams, has a vulnerability that could expose sensitive information. This vulnerability affects all versions up to 1.5.6, and is caused by the plugin revealing Zoom SDK secret keys in the meeting view template. This means that hackers who are not logged in could potentially access these keys and compromise the security of the Zoom integration. This could lead to unauthorized people being able to join meetings.