Videowhisper vulnerabilities
30 CVEs and advisories name Videowhisper as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-107434WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability
- CVE-2026-57716WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability
- CVE-2026-57696WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability
- CVE-2026-57331WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability
- CVE-2026-4301Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter
- CVE-2025-8899Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation
- CVE-2025-13727Video Share VOD <= 2.7.11 - Authenticated (Editor+) Stored Cross-Site Scripting via Custom Field Meta Values
- CVE-2025-62959WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Remote Code Execution (RCE) vulnerability
- CVE-2025-7812Video Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command Injection
- CVE-2025-5937MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings Reset
- CVE-2025-48255WordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2025-31380WordPress Paid Videochat Turnkey Site plugin <= 7.3.11 - Broken Authentication Vulnerability
- CVE-2025-31075WordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26583WordPress Video Share VOD plugin <= 2.7.9 - Reflected Cross-Site Scripting vulnerability
- CVE-2025-26581WordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerability
- CVE-2025-26579WordPress MicroPayments Paid Membership plugin <= 3.2.4 - Reflected Cross-Site Scripting vulnerability
- CVE-2025-26753WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Download vulnerability
- CVE-2025-26752WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Deletion vulnerability
- CVE-2025-22663WordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerability
- CVE-2024-12504Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-13584Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-13392Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-13393Video Share VOD – Turnkey Video Site Builder Script <= 2.6.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-12696Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest Shortcode
- CVE-2024-13391MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-12449Video Share VOD – Turnkey Video Site Builder Script <= 2.6.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-49235WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability
- CVE-2024-34759WordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-52213WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-27629Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prio