VideoWhisper.com
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Paid Videochat Turnkey Site | 7 | – | Oct 21, 2026 |
| Broadcast Live Video | 6 | – | Oct 29, 2026 |
| 2Way VideoCalls and Random Chat | 2 | – | Nov 7, 2026 |
| VideoWhisper Live Streaming Integration | 1 | – | Apr 3, 2024 |
| VideoWhisper Site Manager for ChatGPT, Claude, Codex | 1 | – | Oct 12, 2026 |
Exploited and recent CVEs
- CVE-2026-120857 WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.9 - Broken Access Control vulnerability –
- CVE-2026-115963 WordPress Broadcast Live Video plugin <= 7.3.9 - Broken Access Control vulnerability 0.2%
- CVE-2026-111840 WordPress Paid Videochat Turnkey Site plugin <= 7.5.14 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-111839 WordPress Broadcast Live Video plugin <= 7.3.7 - Broken Access Control vulnerability 0.2%
- CVE-2026-110883 WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability 0.3%
- CVE-2026-107426 WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Broken Access Control vulnerability 0.3%
- CVE-2026-107421 WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hijacking vulnerability 0.2%
- CVE-2026-107428 WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-108475 WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability 0.2%
- CVE-2026-108476 WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability 0.2%
- CVE-2026-107430 WordPress VideoWhisper Site Manager for ChatGPT, Claude, Codex plugin <= 1.2.10 - Broken Access Control vulnerability 0.1%
- CVE-2026-107429 WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability 0.2%
- CVE-2026-27333 WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Deserialization of untrusted data vulnerability 0.3%
- CVE-2026-27053 WordPress Broadcast Live Video plugin < 7.1.3 - PHP Object Injection vulnerability 0.4%
- CVE-2026-24590 WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Broken Access Control vulnerability 0.2%
- CVE-2026-24937 WordPress Broadcast Live Video plugin < 7.1.3 - Remote Code Execution (RCE) vulnerability 0.4%
- CVE-2023-25699 WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE) 1.3%