5.4Mittel
WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability
videowhisper MicroPayments
Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions.
videowhisper Schwachstellen (CVE)
Für videowhisper veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
Picture Gallery 5Paid Videochat Turnkey Site 4Broadcast Live Video 4Video Share VOD – Turnkey Video Site Builder Script 4MicroPayments 4Picture Gallery – Frontend Image Uploads, AJAX Photo List 2Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings 2videowhisper live streaming integration 2MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet 2Paid Videochat Turnkey Site – HTML5 PPV Live Webcams 1Rate Star Review – AJAX Reviews for Content, with Star Ratings 1Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP 1Contact Forms, Live Support, CRM, Video Messages 1Video Share VOD 1contact_forms_live_support_crm_video_messages_plugin 1live_streaming_integration_plugin 1
5.3Mittel
WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability
videowhisper Broadcast Live Video
Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions.
7.1Hoch
WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability
videowhisper Picture Gallery
Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions.
9.9Kritisch
WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability
videowhisper Paid Videochat Turnkey Site
Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions.
4.3Mittel
Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter
videowhisper Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings
The Rate Star Review Vote - AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. The vwrsr_review() AJAX handler lacks both capability checks and nonce verification. The only …
6.4Mittel
WordPress Picture Gallery 1.4.2 Stored XSS via Edit Content URL
picture-gallery Picture Gallery
WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in …
8.8Hoch
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation
videowhisper Paid Videochat Turnkey Site – HTML5 PPV Live Webcams
The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.20. This is due to videowhisper_register_form() function not restricting user roles that can be set d…
4.4Mittel
Video Share VOD <= 2.7.11 - Authenticated (Editor+) Stored Cross-Site Scripting via Custom Field Meta Values
videowhisper Video Share VOD – Turnkey Video Site Builder Script
The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 2.7.11 due to insufficient input sanitization and output escaping. This makes i…
9.1Kritisch
WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Remote Code Execution (RCE) vulnerability
videowhisper Paid Videochat Turnkey Site
Improper Control of Generation of Code ('Code Injection') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Remote Code Inclusion.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.3.23.
8.8Hoch
Video Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command Injection
videowhisper Video Share VOD – Turnkey Video Site Builder Script
The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.6. This is due to missing or incorrect nonce validation on the adminExport() function. This make…
4.3Mittel
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings Reset
videowhisper MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet
The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the admi…
4.3Mittel
WordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) Vulnerability
videowhisper Broadcast Live Video
Cross-Site Request Forgery (CSRF) vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Cross Site Request Forgery.This issue affects Broadcast Live Video: from n/a through <= 6.2.4.
9.8Kritisch
WordPress Paid Videochat Turnkey Site plugin <= 7.3.11 - Broken Authentication Vulnerability
videowhisper Paid Videochat Turnkey Site
Weak Password Recovery Mechanism for Forgotten Password vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Password Recovery Exploitation.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.3.11.
6.5Mittel
WordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerability
videowhisper MicroPayments
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in videowhisper MicroPayments paid-membership allows Stored XSS.This issue affects MicroPayments: from n/a through <= 2.9.29.
7.1Hoch
WordPress Video Share VOD plugin <= 2.7.9 - Reflected Cross-Site Scripting vulnerability
videowhisper Video Share VOD
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Video Share VOD video-share-vod allows Reflected XSS.This issue affects Video Share VOD: from n/a through <= 2.7.9.
7.1Hoch
WordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerability
videowhisper Picture Gallery
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Picture Gallery picture-gallery allows Reflected XSS.This issue affects Picture Gallery: from n/a through <= 1.6.3.
7.1Hoch
WordPress MicroPayments Paid Membership plugin <= 3.2.4 - Reflected Cross-Site Scripting vulnerability
videowhisper MicroPayments
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper MicroPayments paid-membership allows Reflected XSS.This issue affects MicroPayments: from n/a through <= 3.2.4.
7.5Hoch
WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Download vulnerability
videowhisper Broadcast Live Video
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Path Traversal.This issue affects Broadcast Live Video: from n/a through <= 6.2.
8.6Hoch
WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Deletion vulnerability
videowhisper Broadcast Live Video
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Path Traversal.This issue affects Broadcast Live Video: from n/a through <= 6.2.
8.6Hoch
WordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerability
videowhisper Paid Videochat Turnkey Site
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Path Traversal.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.2.12.
6.4Mittel
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
videowhisper Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP
The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_hls' shortcode in all versions up to, and including, 6.1.9 due to insufficient input sa…
6.4Mittel
Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
videowhisper Picture Gallery – Frontend Image Uploads, AJAX Photo List
The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_pictures' shortcode in all versions up to, and including, 1.5.19 due to insufficient input sanitizat…
6.4Mittel
Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
videowhisper Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings
The Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_reviews' shortcode in all versions up to, and including, 1.6.3 due to insufficient input sanitizatio…
6.4Mittel
Video Share VOD – Turnkey Video Site Builder Script <= 2.6.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
videowhisper Video Share VOD – Turnkey Video Site Builder Script
The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_videos' shortcode in all versions up to, and including, 2.6.31 due to insufficient input sanitization and …
6.4Mittel
Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest Shortcode
videowhisper Picture Gallery – Frontend Image Uploads, AJAX Photo List
The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videowhisper_picture_upload_guest shortcode in all versions up to, and including, 1.5.22 due to insufficient input…