CVE-2026-24590mediumCWE-862

CVE-2026-24590: falha de média gravidade em VideoWhisper.com Paid Videochat Turnkey Site

WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Broken Access Control vulnerability

Publicada em

Seguir esta CVE+ Monitorar Paid Videochat Turnkey Site

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.2%
Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Paid Videochat Turnkey Site: from n/a through 7.3.23.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
VideoWhisper.com · Paid Videochat Turnkey Site
CVEs relacionadas — VideoWhisper.com Paid Videochat Turnkey Site

No mesmo produto, das mais perigosas para as menos.

CVE-2026-27333HIGHWordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Deserialization of untrusted data vulnerabilityEPSS 0.3%CVE-2026-107426HIGHWordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-108476MEDIUMWordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-111840HIGHWordPress Paid Videochat Turnkey Site plugin <= 7.5.14 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-107428HIGHWordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-107429MEDIUMWordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerabilityEPSS 0.2%