CVEs we hold for Videowhisper
Records whose assigning authority named Videowhisper as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-57716WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerabilityvideowhisper Broadcast Live Video
CVE-2026-57696WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerabilityvideowhisper Picture Gallery
CVE-2026-57331WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerabilityvideowhisper Paid Videochat Turnkey Site
CVE-2026-4301Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via…videowhisper Rate Star Review Vote – AJAX Reviews, Votes…
CVE-2026-27333WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Deserialization of untrusted data vulnerabilityVideoWhisper.com Paid Videochat Turnkey Site
CVE-2026-27053WordPress Broadcast Live Video plugin < 7.1.3 - PHP Object Injection vulnerabilityVideoWhisper.com Broadcast Live Video
CVE-2026-24937WordPress Broadcast Live Video plugin < 7.1.3 - Remote Code Execution (RCE) vulnerabilityVideoWhisper.com Broadcast Live Video
CVE-2026-24590WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Broken Access Control vulnerabilityVideoWhisper.com Paid Videochat Turnkey Site
CVE-2025-8899Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalationvideowhisper Paid Videochat Turnkey Site – HTML5 PPV Live…
CVE-2025-7812Video Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command Injectionvideowhisper Video Share VOD – Turnkey Video Site Builder…
CVE-2025-62959WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Remote Code Execution (RCE) vulnerabilityvideowhisper Paid Videochat Turnkey Site
CVE-2025-5937MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery…videowhisper MicroPayments – Fans Paysite: Paid Creator…
CVE-2025-48255WordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery…videowhisper Broadcast Live Video
CVE-2025-31380WordPress Paid Videochat Turnkey Site plugin <= 7.3.11 - Broken Authentication Vulnerabilityvideowhisper Paid Videochat Turnkey Site
CVE-2025-31075WordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerabilityvideowhisper MicroPayments
CVE-2025-26753WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Download vulnerabilityvideowhisper Broadcast Live Video
CVE-2025-26752WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Deletion vulnerabilityvideowhisper Broadcast Live Video
CVE-2025-26583WordPress Video Share VOD plugin <= 2.7.9 - Reflected Cross-Site Scripting vulnerabilityvideowhisper Video Share VOD
CVE-2025-26581WordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerabilityvideowhisper Picture Gallery
CVE-2025-26579WordPress MicroPayments Paid Membership plugin <= 3.2.4 - Reflected Cross-Site Scripting vulnerabilityvideowhisper MicroPayments
CVE-2025-22663WordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerabilityvideowhisper Paid Videochat Turnkey Site
CVE-2025-13727Video Share VOD <= 2.7.11 - Authenticated (Editor+) Stored Cross-Site Scripting via Custom Field Meta Valuesvideowhisper Video Share VOD – Turnkey Video Site Builder…
CVE-2024-49235WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerabilityvideowhisper Contact Forms, Live Support, CRM, Video…
CVE-2024-34759WordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerabilityVideoWhisper Picture Gallery
CVE-2024-13584Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site…videowhisper Picture Gallery – Frontend Image Uploads, AJAX…
CVE-2024-13393Video Share VOD – Turnkey Video Site Builder Script <= 2.6.31 - Authenticated (Contributor+) Stored Cross-Site Scriptingvideowhisper Video Share VOD – Turnkey Video Site Builder…
CVE-2024-13392Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site…videowhisper Rate Star Review Vote – AJAX Reviews, Votes…
CVE-2024-13391MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated…videowhisper MicroPayments – Fans Paysite: Paid Creator…
CVE-2024-12696Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.22 - Authenticated (Contributor+) Stored Cross-Site…videowhisper Picture Gallery – Frontend Image Uploads, AJAX…
CVE-2024-12504Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored…videowhisper Broadcast Live Video – Live Streaming :…
CVE-2024-12449Video Share VOD – Turnkey Video Site Builder Script <= 2.6.30 - Authenticated (Contributor+) Stored Cross-Site Scriptingvideowhisper Video Share VOD – Turnkey Video Site Builder…
CVE-2023-52213WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)VideoWhisper Rate Star Review – AJAX Reviews for Content…
CVE-2023-25699WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)VideoWhisper.com VideoWhisper Live Streaming Integration
34 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.