Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Videowhisper Live Streaming Integration HIGH 8.8
CVE-2025-48255

Cross-Site Request Forgery (CSRF) vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Cross Site Reques…

Fix: after 6.2.4
Fix from $1,950 2025-05-19
Videowhisper Live Streaming Integration MEDIUM 5.4
CVE-2024-12504

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the …

Fix: 6.1.10+
Fix from $1,600 2025-01-23
Picture Gallery MEDIUM 5.4
CVE-2024-13584

The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vid…

Fix: 1.5.20+
Fix from $1,600 2025-01-22
Picture Gallery MEDIUM 5.4
CVE-2024-34759

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in VideoWhisper Picture Gallery allows Stor…

Fix: 1.5.12+
Fix from $1,600 2024-06-04
Videowhisper Live Streaming Integration CRITICAL 9.8
CVE-2023-25699

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in VideoWhisper.Com VideoWhisper Live Stream…

Fix: 5.5.16+
Fix from $2,300 2024-04-03
Rate Star Review MEDIUM 6.1
CVE-2023-52213

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper Rate Star Review – AJAX Reviews fo…

Fix: after 1.5.1
Fix from $1,600 2024-01-08
Micropayments HIGH 8.8
CVE-2022-27629

Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.…

Fix: 1.9.6+
Fix from $1,950 2022-04-20
2way Videocalls And Random Chat MEDIUM 6.1
CVE-2021-34656

The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `vws_notice` fu…

Fix: after 5.2.7
Fix from $1,600 2021-08-16
Video Posts Webcam Recorder MEDIUM 5.4
CVE-2021-24512

The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting (XSS) vulnerability in one of the a…

Fix: 3.2.4+
Fix from $1,600 2021-08-16
Webcam MEDIUM 6.1
CVE-2014-8338

Cross-site scripting (XSS) vulnerability in vwrooms/js/jsor-jcarousel/examples/special_textscroller.php in the VideoWhisper Webcam plugins for Drupal…

No fix yet
Fix from $1,600 2020-01-31
Video Comments Webcam Recorder MEDIUM 6.1
CVE-2014-4567

Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded befo…

Fix: after 1.55
Fix from $1,600 2019-12-27
Video Presentation CRITICAL 9.8
CVE-2015-9272

The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers…

No fix yet
Fix from $2,300 2018-10-05
Video Conference CRITICAL 9.8
CVE-2015-9271

The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/v…

No fix yet
Fix from $2,300 2018-10-04
Videowhisper Live Streaming Integration MEDIUM 6.1
CVE-2014-2297

Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers…

Mitigation only
Fix from $1,600 2018-03-19
Videowhisper Live Streaming Integration MEDIUM 5.0
CVE-2014-1908EPSS 7%

The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plug…

Fix: after 4.27.4
Fix from $1,600 2014-12-29
Videowhisper Live Streaming Integration HIGH 10.0
CVE-2014-1905EPSS 10%

Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow…

Fix: after 4.27.4
Fix from $1,950 2014-12-29
Live Streaming Integration Plugin MEDIUM 6.4
CVE-2014-1907EPSS 11%

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers…

Fix: after 4.27.4
Fix from $1,600 2014-03-06