Vendor
VideoWhisper
48 known vulnerabilities in products by VideoWhisper, 0 of them actively exploited (CISA KEV).
Key figures
48
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2015-9272 | Videowhisper Videowhisper-video-presentation: Code Execution | 9.8 | |
| Critical | CVE-2015-9271 | VideoWhisper Video Conference: Code Execution | 9.8 | |
| Critical | CVE-2023-25699 | WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE) | 9.0 | |
| Critical | CVE-2026-57331 | WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability | 9.9 | |
| Critical | CVE-2025-31380 | WordPress Paid Videochat Turnkey Site plugin <= 7.3.11 - Broken Authentication Vulnerability | 9.8 | |
| Not rated | CVE-2014-1907 | Videowhisper Live Streaming Integration: Path Traversal | — | |
| Not rated | CVE-2014-1905 | Videowhisper Live Streaming Integration: Unrestricted File Upload | — | |
| High | CVE-2022-27629 | MicroPayments: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Not rated | CVE-2014-1908 | Videowhisper Live Streaming Integration: Information Disclosure | — | |
| Medium | CVE-2014-8338 | VideoWhisper Webcam: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2025-62959 | WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Remote Code Execution (RCE) vulnerability | 9.1 | |
| High | CVE-2025-8899 | VideoWhisper Paid Videochat Turnkey Site: Improper Privilege Management | 8.8 | |
| High | CVE-2025-22663 | WordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerability | 8.6 | |
| Medium | CVE-2014-4567 | VideoWhisper Video Comments Webcam Recorder: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2025-26752 | VideoWhisper Broadcast Live Video: Path Traversal | 8.6 | |
| Not rated | CVE-2014-1906 | Videowhisper Live Streaming Integration: Cross-Site Scripting (XSS) | — | |
| High | CVE-2026-57696 | WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability | 7.1 | |
| Medium | CVE-2014-2297 | Videowhisper Live Streaming Integration: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2025-26753 | VideoWhisper Broadcast Live Video: Path Traversal | 7.5 | |
| Medium | CVE-2026-107434 | WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability | 5.4 | |
| Medium | CVE-2021-34656 | 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat <= 5.2.7 Reflected Cross-Site Scripting | 6.1 | |
| High | CVE-2025-7812 | VideoWhisper Video Share VOD: Cross-Site Request Forgery (CSRF) | 8.8 | |
| High | CVE-2024-49235 | Insertion of Sensitive Information Into Sent Data (CVE-2024-49235) | 7.5 | |
| Medium | CVE-2026-57716 | WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability | 5.3 | |
| Not rated | CVE-2014-4569 | Videowhisper Live Streaming Integration: Cross-Site Scripting (XSS) | — |
Products
| Broadcast Live Video | 10 | 0 |
| MicroPayments | 5 | 0 |
| Picture Gallery | 5 | 0 |
| Broadcast Live Video | 4 | 0 |
| Paid Videochat Turnkey Site | 4 | 0 |
| Video Share Vod – Turnkey Video Site Builder Script | 4 | 0 |