Vulnerabilities in videowhisper

29 results
Vexday analysis

VideoWhisper registra 24 vulnerabilidades no Vexday, com 3 classificadas como críticas, mas nenhuma sob ataque ativo documentado no KEV. A fraqueza dominante é XSS (CWE-79), típica de plataformas web, com apenas 2 novas vulnerabilidades nos últimos 90 dias, indicando risco moderado e relativamente estável.

CVE-2024-12449MEDIUMVideo Share VOD – Turnkey Video Site Builder Script <= 2.6.30 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-13727MEDIUMVideo Share VOD <= 2.7.11 - Authenticated (Editor+) Stored Cross-Site Scripting via Custom Field Meta ValuesEPSS 0.3%CVE-2026-4301MEDIUMRate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' ParameterEPSS 0.3%CVE-2024-34759MEDIUMWordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-7812HIGHVideo Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command InjectionEPSS 0.3%CVE-2024-12504MEDIUMBroadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-31075MEDIUMWordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-48255MEDIUMWordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2025-5937MEDIUMMicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings ResetEPSS 0.2%