Log in Start free

VideoWhisper

Products

ProductCVEsExploitedLatest
Broadcast Live Video4–Jul 23, 2026
Paid Videochat Turnkey Site4–Jun 29, 2026
Video Share VOD – Turnkey Video Site Builder Script4–Feb 18, 2026
MicroPayments3–Oct 10, 2026
Picture Gallery3–Jul 23, 2026
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet2–Jun 28, 2025
Picture Gallery – Frontend Image Uploads, AJAX Photo List2–Jan 22, 2025
Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings2–May 12, 2026
Contact Forms, Live Support, CRM, Video Messages1–Oct 17, 2024
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP1–Jan 23, 2025
Rate Star Review – AJAX Reviews for Content, with Star Ratings1–Jan 8, 2024
MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership1–Apr 20, 2022
Video Share VOD1–Mar 26, 2025
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams1–Mar 7, 2026

Exploited and recent CVEs

  • CVE-2026-107434 Medium 5.4 WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability 0.3%
  • CVE-2026-57716 Medium 5.3 WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2026-57696 High 7.1 WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2026-57331 Critical 9.9 WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2026-4301 Medium 4.3 Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter 0.3%
  • CVE-2025-8899 High 8.8 Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation 0.4%
  • CVE-2025-13727 Medium 4.4 Video Share VOD <= 2.7.11 - Authenticated (Editor+) Stored Cross-Site Scripting via Custom Field Meta Values 0.3%
  • CVE-2025-62959 Critical 9.1 WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Remote Code Execution (RCE) vulnerability 0.5%
  • CVE-2025-7812 High 8.8 Video Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command Injection 0.3%
  • CVE-2025-5937 Medium 4.3 MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings Reset 0.2%
  • CVE-2025-48255 Medium 4.3 WordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-31380 Critical 9.8 WordPress Paid Videochat Turnkey Site plugin <= 7.3.11 - Broken Authentication Vulnerability 0.6%
  • CVE-2025-31075 Medium 6.5 WordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-26583 High 7.1 WordPress Video Share VOD plugin <= 2.7.9 - Reflected Cross-Site Scripting vulnerability 0.4%
  • CVE-2025-26581 High 7.1 WordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerability 0.4%
  • CVE-2025-26579 High 7.1 WordPress MicroPayments Paid Membership plugin <= 3.2.4 - Reflected Cross-Site Scripting vulnerability 0.4%
  • CVE-2025-26753 High 7.5 WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Download vulnerability 0.6%
  • CVE-2025-26752 High 8.6 WordPress VideoWhisper Live Streaming Integration plugin <= 6.2 - Arbitrary File Deletion vulnerability 0.5%
  • CVE-2025-22663 High 8.6 WordPress Paid Videochat Turnkey Site plugin <= 7.2.12 - Arbitrary File Deletion vulnerability 0.6%
  • CVE-2024-12504 Medium 6.4 Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-13584 Medium 6.4 Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-13392 Medium 6.4 Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-13393 Medium 6.4 Video Share VOD – Turnkey Video Site Builder Script <= 2.6.31 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-12696 Medium 6.4 Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest Shortcode 0.4%
  • CVE-2024-13391 Medium 6.4 MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-12449 Medium 6.4 Video Share VOD – Turnkey Video Site Builder Script <= 2.6.30 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-49235 High 7.5 WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2024-34759 Medium 6.5 WordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-52213 High 7.1 WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2022-27629 Unrated Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker to hijac 0.8%