Vulnerabilidades en VideoWhisper
29 resultadosAnálisis Vexday
VideoWhisper apresenta um perfil de risco baixo com apenas 3 vulnerabilidades conhecidas, nenhuma sob exploração ativa detectada e ausência de falhas críticas. A fraqueza predominante é cross-site scripting (CWE-79), típica de aplicações web, sem indicação de atividade exploratória recente.
CVE-2024-12449MEDIUMVideo Share VOD – Turnkey Video Site Builder Script <= 2.6.30 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-13727MEDIUMVideo Share VOD <= 2.7.11 - Authenticated (Editor+) Stored Cross-Site Scripting via Custom Field Meta ValuesEPSS 0.3%CVE-2026-4301MEDIUMRate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' ParameterEPSS 0.3%CVE-2024-34759MEDIUMWordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-7812HIGHVideo Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command InjectionEPSS 0.3%CVE-2024-12504MEDIUMBroadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-31075MEDIUMWordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-48255MEDIUMWordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2025-5937MEDIUMMicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings ResetEPSS 0.2%