Read the docs

videowhisper

Records48All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

videowhisper records in CISA KEV

No videowhisper vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Videowhisper Live Streaming Integration 10 records MEDIUM Live Streaming Integration Plugin 2 records MEDIUM Micropayments 2 records MEDIUM Picture Gallery 2 records LOW Video Posts Webcam Recorder 2 records LOW Video Presentation 2 records MEDIUM 2way Videocalls And Random Chat 1 record LOW Php 2 Way Video Chat 1 record LOW

Records

2 records in Video Presentation · all components

TI-2015-07650 CVE-2015-9272 · GHSA-2qm5-cxh9-vcp8

The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers…

Priority MEDIUM 50

The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04989 Published 2018-10-05 No fix listed CWE-94
TI-2014-03756 CVE-2014-4570 · GHSA-4fcx-828w-699v

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video…

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) room_name parameter to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02023 Published 2014-07-02 No fix listed CWE-79
Open these records in search →