Read the docs

videowhisper

Records48All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

videowhisper records in CISA KEV

No videowhisper vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Videowhisper Live Streaming Integration 10 records MEDIUM Live Streaming Integration Plugin 2 records MEDIUM Micropayments 2 records MEDIUM Picture Gallery 2 records LOW Video Posts Webcam Recorder 2 records LOW Video Presentation 2 records MEDIUM 2way Videocalls And Random Chat 1 record LOW Php 2 Way Video Chat 1 record LOW

Records

10 records in Videowhisper Live Streaming Integration · all components

TI-2014-01486 CVE-2014-1905 · GHSA-7m98-6gvg-8j73

Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live…

Priority MEDIUM 55

Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file wi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09788 Published 2014-12-29 No fix listed CWE-77
TI-2023-10975 CVE-2023-25699 · GHSA-m586-22m6-88g8

WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)

Priority MEDIUM 45

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in VideoWhisper.Com VideoWhisper Live Streaming Integration allows OS Command Injection.This issue affects VideoWhi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2024-04-03 No fix listed CWE-78
TI-2025-30581 CVE-2025-48255 · GHSA-r9m9-c69f-7vx9

Cross-site request forgery in videowhisper Broadcast Live Video

Priority LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Cross Site Request Forgery.This issue affects Broadcast Live Video: from n/a through <=…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00188 Published 2025-05-19 No fix listed CWE-352
TI-2014-01489 CVE-2014-1908 · GHSA-jhqr-x27r-cvw4

The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3)…

Priority LOW 33

The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to obtain sensit…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06794 Published 2014-12-29 No fix listed CWE-200
TI-2024-11603 CVE-2024-12504 · GHSA-82j9-ww46-22f6

Cross-site scripting in videowhisper Broadcast Live Video – Live Streaming : WebRTC, HLS…

Priority LOW 28

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_hls' shortcode in all versions up to, and includ…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0023 Published 2025-01-23 No fix listed CWE-79
TI-2013-04866 CVE-2013-5714 · GHSA-x9wv-x8g7-f28h

Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the…

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02035 Published 2013-09-09 No fix listed CWE-79
Open these records in search →