Videowhisper
40 CVEs across 26 Videowhisper products. Browse Videowhisper vulnerabilities, severities, and proof-of-concept exploits.
Videowhisper products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-57716 | Medium | 5.3 | 2026-07-23 | Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions. |
CVE-2026-57696 | High | 7.1 | 2026-07-23 | Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions. |
CVE-2026-57331 | Critical | 9.9 | 2026-06-29 | Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions. |
CVE-2026-4301 | Medium | 4.3 | 2026-05-12 | The Rate Star Review Vote - AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1… |
CVE-2025-8899 | High | 8.8 | 2026-03-07 | The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.2… |
CVE-2025-13727 | Medium | 4.4 | 2026-02-18 | The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions u… |
CVE-2025-62959 | Critical | 9.1 | 2025-10-27 | Improper Control of Generation of Code ('Code Injection') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Remote Code Inclusi… |
CVE-2025-7812 | High | 8.8 | 2025-08-28 | The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including… |
CVE-2025-5937 | Medium | 4.3 | 2025-06-28 | The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all ve… |
CVE-2025-48255 | Medium | 4.3 | 2025-05-19 | Cross-Site Request Forgery (CSRF) vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Cross Site Request Forgery… |
CVE-2025-31380 | Critical | 9.8 | 2025-04-17 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Password Recovery Exp… |
CVE-2025-31075 | Medium | 6.5 | 2025-03-28 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in videowhisper MicroPayments paid-membership allows Stored XSS.Thi… |
CVE-2025-26583 | High | 7.1 | 2025-03-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Video Share VOD video-share-vod allows Refle… |
CVE-2025-26581 | High | 7.1 | 2025-03-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Picture Gallery picture-gallery allows Refle… |
CVE-2025-26579 | High | 7.1 | 2025-03-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper MicroPayments paid-membership allows Reflect… |
CVE-2025-26753 | High | 7.5 | 2025-02-25 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-i… |
CVE-2025-26752 | High | 8.6 | 2025-02-25 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-i… |
CVE-2025-22663 | High | 8.6 | 2025-02-18 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allow… |
CVE-2024-12504 | Medium | 6.4 | 2025-01-23 | The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's '… |
CVE-2024-13584 | Medium | 6.4 | 2025-01-22 | The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_… |
CVE-2024-13392 | Medium | 6.4 | 2025-01-18 | The Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_… |
CVE-2024-13393 | Medium | 6.4 | 2025-01-18 | The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_videos… |
CVE-2024-13391 | Medium | 6.4 | 2025-01-18 | The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… |
CVE-2024-12696 | Medium | 6.4 | 2025-01-18 | The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videowhisper_p… |
CVE-2024-12449 | Medium | 6.4 | 2024-12-18 | The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_player… |
CVE-2024-49235 | High | 7.5 | 2024-10-17 | Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Re… |
CVE-2024-34759 | Medium | 6.5 | 2024-06-04 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in VideoWhisper Picture Gallery allows Stored XSS.Thi… |
CVE-2023-25699 | Critical | 9.0 | 2024-04-03 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in VideoWhisper.Com VideoWhisper Live Streaming Integr… |
CVE-2023-52213 | High | 7.1 | 2024-01-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper Rate Star Review – AJAX Reviews for Content… |
CVE-2022-27629 | High | 8.8 | 2022-04-20 | Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a… |
CVE-2021-34656 | Medium | 6.1 | 2021-08-16 | The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `vws_notice` function fou… |
CVE-2021-24512 | Medium | 5.4 | 2021-08-16 | The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting (XSS) vulnerability in one of the administrat… |
CVE-2014-8338 | Medium | 6.1 | 2020-01-31 | Cross-site scripting (XSS) vulnerability in vwrooms/js/jsor-jcarousel/examples/special_textscroller.php in the VideoWhisper Webcam plugins for Drupal 7.x allow… |
CVE-2014-4567 | Medium | 6.1 | 2019-12-27 | Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 2014011… |
CVE-2015-9272 | Critical | 9.8 | 2018-10-05 | The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers a file sa… |
CVE-2015-9271 | Critical | 9.8 | 2018-10-04 | The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.p… |
CVE-2014-2297 | Medium | 6.1 | 2018-03-19 | Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject… |
CVE-2014-1908 | | 2014-12-29 | The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before… | |
CVE-2014-1905 | | 2014-12-29 | Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote a… | |
CVE-2014-4570 | | 2014-07-02 | Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject ar… | |
CVE-2014-4568 | | 2014-07-02 | Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows r… | |
CVE-2014-4569 | | 2014-07-01 | Cross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remot… | |
CVE-2014-2715 | | 2014-04-28 | Multiple cross-site scripting (XSS) vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attacker… | |
CVE-2014-1907 | | 2014-03-06 | Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) re… | |
CVE-2014-1906 | | 2014-03-06 | Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to… | |
CVE-2013-5714 | | 2013-09-09 | Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for Wo… | |
CVE-2010-4971 | | 2011-11-02 | Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or H… |