Skip to content
OpenAdvisories
High · 8.6 CVE-2025-22663 EUVD-2025-4776GHSA-gx24-9fw3-rrqp

WordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerability

Published Feb 18, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Path Traversal.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.2.12.

Affected products

VendorProductAffectedFixed
videowhisper Paid Videochat Turnkey Site ≤ 7.2.12 —

References