VI
Vendor
videowhisper
58
CVEs
0
On KEV
1
New 30D
Products
MI8.8
MicroPayments
videowhisper
5 CVEs0 on KEV1 new
VL9.8
Videowhisper Live Streaming Integration
Videowhisper
10 CVEs0 on KEV0 new
BL8.8
Broadcast Live Video
videowhisper
4 CVEs0 on KEV0 new
PV9.9
Paid Videochat Turnkey Site
videowhisper
4 CVEs0 on KEV0 new
PG7.1
Picture Gallery
videowhisper
4 CVEs0 on KEV0 new
VS8.8
Video Share VOD – Turnkey Video Site Builder Script
videowhisper
4 CVEs0 on KEV0 new
LS9.8
Live Streaming Integration Plugin
Videowhisper
3 CVEs0 on KEV0 new
MF6.4
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet
videowhisper
2 CVEs0 on KEV0 new
PG6.4
Picture Gallery – Frontend Image Uploads, AJAX Photo List
videowhisper
2 CVEs0 on KEV0 new
RS6.4
Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings
videowhisper
2 CVEs0 on KEV0 new
VP5.4
Video Posts Webcam Recorder
Videowhisper
2 CVEs0 on KEV0 new
VP9.8
Video Presentation
Videowhisper
2 CVEs0 on KEV0 new
2V6.1
2way Videocalls And Random Chat
Videowhisper
1 CVEs0 on KEV0 new
BL5.4
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP
videowhisper
1 CVEs0 on KEV0 new
CF7.5
Contact Forms, Live Support, CRM, Video Messages
videowhisper
1 CVEs0 on KEV0 new
CF7.5
Contact Forms Live Support Crm Video Messages Plugin
Videowhisper
1 CVEs0 on KEV0 new
MP8.8
MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership
VideoWhisper
1 CVEs0 on KEV0 new
PV8.8
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams
videowhisper
1 CVEs0 on KEV0 new
P2–
Php 2 Way Video Chat
Videowhisper
1 CVEs0 on KEV0 new
RS6.1
Rate Star Review
Videowhisper
1 CVEs0 on KEV0 new
RS6.1
Rate Star Review – AJAX Reviews for Content, with Star Ratings
VideoWhisper
1 CVEs0 on KEV0 new
VC6.1
Video Comments Webcam Recorder
Videowhisper
1 CVEs0 on KEV0 new
VC9.8
Video Conference
Videowhisper
1 CVEs0 on KEV0 new
VS7.1
Video Share VOD
videowhisper
1 CVEs0 on KEV0 new
VI–
Videowhisper
Videowhisper
1 CVEs0 on KEV0 new
WE6.1
Webcam
Videowhisper
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107434 | MI MicroPayments videowhisper | 5.4 | Oct 10 | WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability |
| CVE-2026-57716 | BL Broadcast Live Video videowhisper | 5.3 | Jul 23 | WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability |
| CVE-2026-57696 | PG Picture Gallery videowhisper | 7.1 | Jul 23 | WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability |
| CVE-2026-57331 | PV Paid Videochat Turnkey Site videowhisper | 9.9 | Jun 29 | WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability |
| CVE-2026-4301 | RS Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings videowhisper | 4.3 | May 12 | Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter |
| CVE-2025-8899 | PV Paid Videochat Turnkey Site – HTML5 PPV Live Webcams videowhisper | 8.8 | Mar 7 | Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation |
| CVE-2025-13727 | VS Video Share VOD – Turnkey Video Site Builder Script videowhisper | 4.4 | Feb 18 | Video Share VOD <= 2.7.11 - Authenticated (Editor+) Stored Cross-Site Scripting via Custom Field Meta Values |
| CVE-2025-62959 | PV Paid Videochat Turnkey Site videowhisper | 9.1 | Oct 27 | WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Remote Code Execution (RCE) vulnerability |
| CVE-2025-7812 | VS Video Share VOD – Turnkey Video Site Builder Script videowhisper | 8.8 | Aug 28 | Video Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command Injection |
| CVE-2025-5937 | MF MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet videowhisper | 4.3 | Jun 28 | MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings Reset |
| CVE-2025-48255 | BL Broadcast Live Video videowhisper | 8.8 | May 19 | WordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) Vulnerability |
| CVE-2025-31380 | PV Paid Videochat Turnkey Site videowhisper | 9.8 | Apr 17 | WordPress Paid Videochat Turnkey Site plugin <= 7.3.11 - Broken Authentication Vulnerability |
| CVE-2025-31075 | MI MicroPayments videowhisper | 6.5 | Mar 28 | WordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-26583 | VS Video Share VOD videowhisper | 7.1 | Mar 26 | WordPress Video Share VOD plugin <= 2.7.9 - Reflected Cross-Site Scripting vulnerability |
| CVE-2025-26581 | PG Picture Gallery videowhisper | 7.1 | Mar 26 | WordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerability |
| CVE-2025-26579 | MI MicroPayments videowhisper | 7.1 | Mar 26 | WordPress MicroPayments Paid Membership plugin <= 3.2.4 - Reflected Cross-Site Scripting vulnerability |
| CVE-2025-26753 | BL Broadcast Live Video videowhisper | 7.5 | Feb 25 | WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Download vulnerability |
| CVE-2025-26752 | BL Broadcast Live Video videowhisper | 8.6 | Feb 25 | WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Deletion vulnerability |
| CVE-2025-22663 | PV Paid Videochat Turnkey Site videowhisper | 8.6 | Feb 18 | WordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerability |
| CVE-2024-12504 | BL Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP videowhisper | 5.4 | Jan 23 | Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-13584 | PG Picture Gallery – Frontend Image Uploads, AJAX Photo List videowhisper | 5.4 | Jan 22 | Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-13392 | RS Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings videowhisper | 6.4 | Jan 18 | Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-13393 | VS Video Share VOD – Turnkey Video Site Builder Script videowhisper | 6.4 | Jan 18 | Video Share VOD – Turnkey Video Site Builder Script <= 2.6.31 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-12696 | PG Picture Gallery – Frontend Image Uploads, AJAX Photo List videowhisper | 6.4 | Jan 18 | Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest Shortcode |
| CVE-2024-13391 | MF MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet videowhisper | 6.4 | Jan 18 | MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-12449 | VS Video Share VOD – Turnkey Video Site Builder Script videowhisper | 6.4 | Dec 18 | Video Share VOD – Turnkey Video Site Builder Script <= 2.6.30 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-49235 | CF Contact Forms, Live Support, CRM, Video Messages videowhisper | 7.5 | Oct 17 | WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability |
| CVE-2024-34759 | PG Picture Gallery VideoWhisper | 5.4 | Jun 4 | WordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-25699 | VL Videowhisper Live Streaming Integration Videowhisper | 9.8 | Apr 3 | WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE) |
| CVE-2023-52213 | RS Rate Star Review – AJAX Reviews for Content, with Star Ratings VideoWhisper | 6.1 | Jan 8 | WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-27629 | MP MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership VideoWhisper | 8.8 | Apr 20 | Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote… |
| CVE-2021-34656 | 2V 2way Videocalls And Random Chat Videowhisper | 6.1 | Aug 16 | 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat <= 5.2.7 Reflected Cross-Site Scripting |
| CVE-2021-24512 | VP Video Posts Webcam Recorder Videowhisper | 5.4 | Aug 16 | The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting (XSS) vulnerability in one of the administrative functions for… |
| CVE-2014-8338 | WE Webcam Videowhisper | 6.1 | Jan 31 | Cross-site scripting (XSS) vulnerability in vwrooms/js/jsor-jcarousel/examples/special_textscroller.php in the VideoWhisper Webcam plugins for Drupal 7.x allows remote attackers… |
| CVE-2014-4567 | VC Video Comments Webcam Recorder Videowhisper | 6.1 | Dec 27 | Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 20140116 for WordPress… |
| CVE-2015-9272 | VP Video Presentation Videowhisper | 9.8 | Oct 5 | The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers a file safe when "html" are… |
| CVE-2015-9271 | VC Video Conference Videowhisper | 9.8 | Oct 4 | The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file… |
| CVE-2014-2297 | VL Videowhisper Live Streaming Integration Videowhisper | 6.1 | Mar 19 | Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web… |
| CVE-2014-1908 | VL Videowhisper Live Streaming Integration Videowhisper | – | Dec 29 | The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress… |
| CVE-2014-1905 | VL Videowhisper Live Streaming Integration Videowhisper | – | Dec 29 | Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to execute… |
| CVE-2014-4570 | VP Video Presentation Videowhisper | – | Jul 2 | Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Video Presentation plugin before 3.31 for WordPress allow remote attackers to inject arbitrary web script… |
| CVE-2014-4568 | VP Video Posts Webcam Recorder Videowhisper | – | Jul 2 | Cross-site scripting (XSS) vulnerability in posts/videowhisper/r_logout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to… |
| CVE-2014-4569 | VL Videowhisper Live Streaming Integration Videowhisper | – | Jul 1 | Cross-site scripting (XSS) vulnerability in ls/vv_login.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to… |
| CVE-2014-2715 | VI Videowhisper Videowhisper | – | Apr 28 | Multiple cross-site scripting (XSS) vulnerabilities in vwrooms\templates\logout.tpl.php in the VideoWhisper Webcam plugins for Drupal 7.x allow remote attackers to inject… |
| CVE-2014-1907 | LS Live Streaming Integration Plugin Videowhisper | – | Mar 6 | Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files… |
| CVE-2014-1906 | LS Live Streaming Integration Plugin Videowhisper | – | Mar 6 | Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary… |
| CVE-2013-5714 | VL Videowhisper Live Streaming Integration Videowhisper | – | Sep 9 | Multiple cross-site scripting (XSS) vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote… |
| CVE-2010-4971 | P2 Php 2 Way Video Chat Videowhisper | – | Nov 2 | Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r… |
