cbcvebase.

Videowhisper Paid Videochat Turnkey Site Html5 Ppv Live Webcams vulnerabilities

1 known vulnerability affecting videowhisper/paid_videochat_turnkey_site_html5_ppv_live_webcams.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2025-8899P2HIGHCVSS 8.8≤ 7.3.202026-03-07
CVE-2025-8899 [HIGH] CWE-269 CVE-2025-8899: The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privi The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.20. This is due to videowhisper_register_form() function not restricting user roles that can be set during registration. This makes it possible for authenticated attackers, with Author-level access
nvd
Videowhisper Paid Videochat Turnkey Site Html5 Ppv Live Webcams vulnerabilities | cvebase