Videowhisper vulnerabilities

Products

• Paid Videochat Turnkey Site 11
• Broadcast Live Video 10
• Live Streaming Integration 10
• Micropayments 5
• Video Share Vod – Turnkey Video Site Builder Script 4
• Live Streaming Integration Plugin 3
• Picture Gallery 3
• Micropayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet 2
• Picture Gallery 2
• Picture Gallery – Frontend Image Uploads, Ajax Photo List 2
• Rate Star Review Vote – Ajax Reviews, Votes, Star Ratings 2
• Video Posts Webcam Recorder 2
• Video Presentation 2

Newest

• videowhisper broadcast live video WordPress Broadcast Live Video plugin <= 7.3.9 - Broken Access Control vulnerability CVE-2026-115963 7.1 HighOctober 29, 2026
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.5.14 - Cross Site Scripting (XSS) vulnerability CVE-2026-111840 7.1 HighOctober 21, 2026
• videowhisper broadcast live video WordPress Broadcast Live Video plugin <= 7.3.7 - Broken Access Control vulnerability CVE-2026-111839 5.3 MediumOctober 19, 2026
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Broken Access Control vulnerability CVE-2026-107426 7.3 HighOctober 14, 2026
• videowhisper broadcast live video WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hijacking vulnerability CVE-2026-107421 7.3 HighOctober 14, 2026
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Cross Site Scripting (XSS) vulnerability CVE-2026-107428 7.1 HighOctober 14, 2026
• videowhisper broadcast live video WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability CVE-2026-108475 4.3 MediumOctober 12, 2026
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability CVE-2026-108476 5.0 MediumOctober 12, 2026
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability CVE-2026-107429 4.3 MediumOctober 12, 2026
• videowhisper micropayments WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability CVE-2026-107434 5.4 MediumOctober 10, 2026
• videowhisper broadcast live video WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability CVE-2026-57716 5.3 MediumJuly 23, 2026
• picture-gallery picture gallery WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability CVE-2026-57696 7.1 HighJuly 23, 2026
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability CVE-2026-57331 9.9 CriticalJune 29, 2026
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Deserialization of untrusted data vulnerability CVE-2026-27333 8.1 HighJune 15, 2026
• videowhisper broadcast live video WordPress Broadcast Live Video plugin < 7.1.3 - PHP Object Injection vulnerability CVE-2026-27053 9.8 CriticalJune 15, 2026
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Broken Access Control vulnerability CVE-2026-24590 5.3 MediumMay 26, 2026
• videowhisper broadcast live video WordPress Broadcast Live Video plugin < 7.1.3 - Remote Code Execution (RCE) vulnerability CVE-2026-24937 7.2 HighMay 25, 2026
• videowhisper rate star review vote – ajax reviews, votes, star ratings Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter CVE-2026-4301 4.3 MediumMay 12, 2026
• videowhisper paid videochat turnkey site – html5 ppv live webcams Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation CVE-2025-8899 8.8 HighMarch 7, 2026
• videowhisper video share vod – turnkey video site builder script Video Share VOD <= 2.7.11 - Authenticated (Editor+) Stored Cross-Site Scripting via Custom Field Meta Values CVE-2025-13727 4.4 MediumFebruary 18, 2026
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Remote Code Execution (RCE) vulnerability CVE-2025-62959 9.1 CriticalOctober 27, 2025
• videowhisper video share vod – turnkey video site builder script Video Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command Injection CVE-2025-7812 8.8 HighAugust 28, 2025
• videowhisper micropayments, micropayments – fans paysite: paid creator subscriptions, digital assets, wallet +1 more MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings Reset CVE-2025-5937 4.3 MediumJune 28, 2025
• videowhisper broadcast live video, live streaming integration +1 more WordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-48255 4.3 MediumMay 19, 2025
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.3.11 - Broken Authentication Vulnerability CVE-2025-31380 9.8 CriticalApril 17, 2025
• videowhisper micropayments WordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerability CVE-2025-31075 6.5 MediumMarch 28, 2025
• videowhisper video share vod WordPress Video Share VOD plugin <= 2.7.9 - Reflected Cross-Site Scripting vulnerability CVE-2025-26583 7.1 HighMarch 26, 2025
• picture-gallery picture gallery WordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerability CVE-2025-26581 7.1 HighMarch 26, 2025
• videowhisper micropayments WordPress MicroPayments Paid Membership plugin <= 3.2.4 - Reflected Cross-Site Scripting vulnerability CVE-2025-26579 7.1 HighMarch 26, 2025
• videowhisper broadcast live video WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Download vulnerability CVE-2025-26753 7.5 HighFebruary 25, 2025
• videowhisper broadcast live video WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Deletion vulnerability CVE-2025-26752 8.6 HighFebruary 25, 2025
• videowhisper paid videochat turnkey site WordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerability CVE-2025-22663 8.6 HighFebruary 18, 2025
• videowhisper broadcast live video – live streaming : webrtc, hls, rtsp, rtmp, live streaming integration +1 more Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12504 6.4 MediumJanuary 23, 2025
• videowhisper picture gallery – frontend image uploads, ajax photo list, picture gallery +1 more Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13584 6.4 MediumJanuary 22, 2025
• videowhisper rate star review vote – ajax reviews, votes, star ratings Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13392 6.4 MediumJanuary 18, 2025
• videowhisper video share vod – turnkey video site builder script Video Share VOD – Turnkey Video Site Builder Script <= 2.6.31 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13393 6.4 MediumJanuary 18, 2025
• videowhisper picture gallery – frontend image uploads, ajax photo list Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest Shortcode CVE-2024-12696 6.4 MediumJanuary 18, 2025
• videowhisper micropayments – fans paysite: paid creator subscriptions, digital assets, wallet MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13391 6.4 MediumJanuary 18, 2025
• videowhisper video share vod – turnkey video site builder script Video Share VOD – Turnkey Video Site Builder Script <= 2.6.30 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12449 6.4 MediumDecember 18, 2024
• videowhisper contact forms, live support, crm, video messages, contact forms live support crm video messages plugin +1 more WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability CVE-2024-49235 7.5 HighOctober 17, 2024
• picture-gallery picture gallery WordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerability CVE-2024-34759 6.5 MediumJune 4, 2024
• videowhisper live streaming integration plugin, live streaming integration, videowhisper.com videowhisper live streaming integration +2 more WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE) CVE-2023-25699 9.0 CriticalApril 3, 2024
• videowhisper rate star review – ajax reviews for content, with star ratings, rate star review +1 more WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-52213 7.1 HighJanuary 8, 2024
• videowhisper micropayments, micropayments - paid author subscriptions, content, downloads, membership +1 more Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions,... CVE-2022-27629 8.8 HighApril 20, 2022
• 2way videocalls and random chat - html5 webcam videochat videocalls and random chat - html5 webcam videochat, videowhisper 2way videocalls and random chat +1 more 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat <= 5.2.7 Reflected Cross-Site Scripting CVE-2021-34656 6.1 MediumAugust 16, 2021
• unknown video posts webcam recorder Video Posts Webcam Recorder < 3.2.4 - Authenticated Reflected XSS CVE-2021-24512 5.4 MediumAugust 16, 2021
• videowhisper webcam Cross-site scripting (XSS) vulnerability in vwrooms/js/jsor-jcarousel/examples... CVE-2014-8338 6.1 MediumJanuary 31, 2020
• videowhisper video comments webcam recorder Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video... CVE-2014-4567 6.1 MediumDecember 27, 2019
• videowhisper video presentation The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to... CVE-2015-9272 9.8 CriticalOctober 5, 2018
• videowhisper video conference The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows... CVE-2015-9271 9.8 CriticalOctober 4, 2018
• Show olderLoading…