CVE Intelligence

DigitalME vulnerabilities

🔔 Create alert RSS

Published CVEs affecting DigitalME products: 4 record(s), with severity, exploitation and fixes.

eRoom 4

Exploited only (KEV) →

CVE-2026-62038 High · 7.3 CWE-288 Oct 10, 2026
WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.
CVE-2026-25427 Medium · 5.4 CWE-862 Jul 23, 2026
WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in eRoom <= 1.7.1 versions.
CVE-2026-25405 High · 8.5 CWE-89 Jul 23, 2026
WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability
Contributor SQL Injection in eRoom <= 1.7.1 versions.
CVE-2025-49919 Medium · 5.8 CWE-201 Dec 18, 2025
WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Retrieve Embedded Sensitive Data.This issue affects eRoom: from n/a through <= 1.5.6.