CVE-2025-62038: 
WordPress vulnerability analysis and mitigation

A sensitive data exposure vulnerability (CVE-2025-62038) was discovered in MeetingHub WordPress plugin versions 1.23.9 and below. The vulnerability was reported by Denver Jackson on October 11, 2025, affecting the MeetingHub plugin for Zoom Meeting, Google Meet, Jitsi Meet, and Webex integrations (Wordfence Report, Patchstack Database).

The vulnerability is classified as a Sensitive Data Exposure issue with a CVSS severity score of 6.5, indicating a moderate risk level. It falls under the OWASP Top 10 category of A1: Broken Access Control. The vulnerability requires Subscriber-level privileges to exploit (Patchstack Database).

This vulnerability could allow malicious actors with subscriber-level access to view sensitive information that is normally not accessible to regular users. This exposed data could potentially be used as a stepping stone to exploit other weaknesses in the system (Patchstack Database).

The vulnerability has been patched in version 1.23.10 of the MeetingHub plugin. Users are advised to update to version 1.23.10 or later immediately. Patchstack has issued a mitigation rule to block any attacks until users can update to the fixed version (Patchstack Database).