Critical · 9.0 CVE-2023-25699 EUVD-2023-29609GHSA-m586-22m6-88g8

WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)

Published Apr 3, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: VideoWhisper.com Product: VideoWhisper Live Streaming Integration

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in VideoWhisper.Com VideoWhisper Live Streaming Integration allows OS Command Injection.This issue affects VideoWhisper Live Streaming Integration: from n/a through 5.5.15.

Affected products

Vendor	Product	Affected	Fixed
VideoWhisper.com	VideoWhisper Live Streaming Integration	≤ 5.5.15	—

References

https://patchstack.com/database/vulnerability/videowhisper-live-streaming-integration/wordpress-broadcast-live-video-live-streaming-html5-webrtc-hls-rtsp-rtmp-plugin-5-5-15-remote-code-execution-rce?_s_id=cve vdb-entry