Videowhisper Live Streaming Integration vulnerabilities

Product

Videowhisper Live Streaming Integration

by Videowhisper · last CVE May 19, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 1High 1Medium 2Low 0

Severity

All severities10 Critical1 High1 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Videowhisper Live Streaming Integration to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-25699	9.8	1%	Apr 3	WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE) Affected: before 5.5.16
CVE-2025-48255	8.8	0%	May 19	WordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) Vulnerability Affected: through 6.2.4
CVE-2014-2297	6.1	1%	Mar 19	Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web… Affected: 4.29.6
CVE-2024-12504	5.4	0%	Jan 23	Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 6.1.10
CVE-2014-1908	–	7%	Dec 29	The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress… Affected: through 4.27.4
CVE-2014-1905	–	10%	Dec 29	Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to execute… Affected: through 4.27.4
CVE-2014-4569	–	2%	Jul 1	Cross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to… Affected: through 4.27; 1.0.2; 2.0; 2.1; 2.2; 4.05; +3 more
CVE-2014-1907	–	11%	Mar 6	Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files… Affected: through 4.27.4; 1.0.2; 2.0; 2.1; 2.2; 4.05; +3 more
CVE-2014-1906	–	5%	Mar 6	Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary… Affected: through 4.27.4; 1.0.2; 2.0; 2.1; 2.2; 4.05; +3 more
CVE-2013-5714	–	2%	Sep 9	Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote… Affected: through 4.25.3; 1.0.2; 2.0; 2.1; 2.2; 4.05; +2 more