CVE-2026-120857mediumCWE-862

CVE-2026-120857: medium-severity vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat

WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.9 - Broken Access Control vulnerability

Published

Follow this CVE+ Monitor 2Way VideoCalls and Random Chat

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3
Missing Authorization vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.9.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
VideoWhisper.com · 2Way VideoCalls and Random Chat
Related CVEs — VideoWhisper.com 2Way VideoCalls and Random Chat

In the same product, most dangerous first.

CVE-2026-110883MEDIUMWordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerabilityEPSS 0.3%