Skip to content
OpenAdvisories

Vendor

videowhisper

30 known vulnerabilities.

Products

Video Share VOD – Turnkey Video Site Builder Script 4 Broadcast Live Video 4 Paid Videochat Turnkey Site 4 Picture Gallery 3 MicroPayments 3 Picture Gallery – Frontend Image Uploads, AJAX Photo List 2 MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet 2 Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings 2 Video Share VOD 1 Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP 1 MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership 1 Paid Videochat Turnkey Site – HTML5 PPV Live Webcams 1 Rate Star Review – AJAX Reviews for Content, with Star Ratings 1 Contact Forms, Live Support, CRM, Video Messages 1
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.1
    CVE-2026-57696

    WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability

    Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions.

    videowhisper Picture Gallery
  • High 8.8
    CVE-2025-8899

    Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation

    The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.20. This is due to videowhisper_register_form() function not restricting user roles that can be set d…

    videowhisper Paid Videochat Turnkey Site – HTML5 PPV Live Webcams Web / CMS
  • High 8.8
    CVE-2025-7812

    Video Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command Injection

    The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.6. This is due to missing or incorrect nonce validation on the adminExport() function. This make…

    videowhisper Video Share VOD – Turnkey Video Site Builder Script Web / CMS
  • High 7.1
    CVE-2025-26579

    WordPress MicroPayments Paid Membership plugin <= 3.2.4 - Reflected Cross-Site Scripting vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper MicroPayments paid-membership allows Reflected XSS.This issue affects MicroPayments: from n/a through <= 3.2.4.

    videowhisper MicroPayments
  • High 7.1
    CVE-2025-26583

    WordPress Video Share VOD plugin <= 2.7.9 - Reflected Cross-Site Scripting vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Video Share VOD video-share-vod allows Reflected XSS.This issue affects Video Share VOD: from n/a through <= 2.7.9.

    videowhisper Video Share VOD
  • High 7.1
    CVE-2025-26581

    WordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Picture Gallery picture-gallery allows Reflected XSS.This issue affects Picture Gallery: from n/a through <= 1.6.3.

    videowhisper Picture Gallery
  • High 8.6
    CVE-2025-26752

    WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Path Traversal.This issue affects Broadcast Live Video: from n/a through <= 6.2.

    videowhisper Broadcast Live Video
  • High 7.5
    CVE-2025-26753

    WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Path Traversal.This issue affects Broadcast Live Video: from n/a through <= 6.2.

    videowhisper Broadcast Live Video
  • High 8.6
    CVE-2025-22663

    WordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Path Traversal.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.2.12.

    videowhisper Paid Videochat Turnkey Site
  • High 7.5
    CVE-2024-49235

    WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: …

    videowhisper Contact Forms, Live Support, CRM, Video Messages
  • High 7.1
    CVE-2023-52213

    WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper Rate Star Review – AJAX Reviews for Content, with Star Ratings allows Reflected XSS.This issue affects Rate Star Review – AJAX Reviews for Conte…

    videowhisper Rate Star Review – AJAX Reviews for Content, with Star Ratings