Vulnerabilities

TI-2025-30581 CVE-2025-48255 · GHSA-r9m9-c69f-7vx9

Cross-site request forgery in videowhisper Broadcast Live Video

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Cross Site Request Forgery.This issue affects Broadcast Live Video: from n/a through <=…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00188 Published 2025-05-19 No fix listed CWE-352

TI-2024-11603 CVE-2024-12504 · GHSA-82j9-ww46-22f6

Cross-site scripting in videowhisper Broadcast Live Video – Live Streaming : WebRTC, HLS…

LOW 28

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_hls' shortcode in all versions up to, and includ…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0023 Published 2025-01-23 No fix listed CWE-79

TI-2023-10975 CVE-2023-25699 · GHSA-m586-22m6-88g8

WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)

MEDIUM 45

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in VideoWhisper.Com VideoWhisper Live Streaming Integration allows OS Command Injection.This issue affects VideoWhi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01289 Published 2024-04-03 No fix listed CWE-78

TI-2014-01822 CVE-2014-2297 · GHSA-f39g-97j7-v6v7

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming…

LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to ls/h…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01122 Published 2018-03-19 No fix listed CWE-79

TI-2014-01489 CVE-2014-1908 · GHSA-jhqr-x27r-cvw4

The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3)…

LOW 33

The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to obtain sensit…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06794 Published 2014-12-29 No fix listed CWE-200

TI-2014-01486 CVE-2014-1905 · GHSA-7m98-6gvg-8j73

Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live…

MEDIUM 55

Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file wi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09788 Published 2014-12-29 No fix listed CWE-77

TI-2014-03755 CVE-2014-4569 · GHSA-2crr-37jg-749x

Cross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live…

LOW 24

Cross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ro…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02046 Published 2014-07-01 No fix listed CWE-79

TI-2014-01488 CVE-2014-1907 · GHSA-9m37-gr52-8qh6

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming…

MEDIUM 42

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files via a ..

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.11136 Published 2014-03-06 No fix listed CWE-22

TI-2014-01487 CVE-2014-1906 · GHSA-jf8j-j634-pfmg

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) m parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04529 Published 2014-03-06 No fix listed CWE-79

TI-2013-04866 CVE-2013-5714 · GHSA-x9wv-x8g7-f28h

Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02035 Published 2013-09-09 No fix listed CWE-79

Vulnerabilities

Filters