Threat database

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Reflected XSS.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.14.

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.7.

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5.

CVE-2026-107426 is a missing authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site (ppv-live-webcams) that affects versions from 0 up to 7.5.12. The flaw involves incorrectly configured access control security levels, allowing unauthorized access. The vulnerability has a CVSS 3.1 score of 7.3, indicating high severity with network attack vector, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability. No patch or remediation information is provided in the source data.

CVE-2026-107421 is a session fixation vulnerability in VideoWhisper.com Broadcast Live Video software versions prior to 7.3.3. This flaw allows an attacker to hijack user sessions, potentially leading to unauthorized access. The vulnerability affects versions from initial releases up to 7.3.2. It has a CVSS 3.1 score of 7.3, indicating high severity with network attack vector and no required privileges or user interaction.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Reflected XSS.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12.

CVE-2026-108475 is a missing authorization vulnerability in VideoWhisper.com's Broadcast Live Video product, affecting versions from initial release up to 7.3.6. The flaw allows exploitation due to incorrectly configured access control security levels, potentially enabling unauthorized actions. The vulnerability has a CVSS 3.1 base score of 4.3, indicating medium severity. No known exploits are reported in the wild, and no official patch or remediation details are provided in the available data.

CVE-2026-108476 is a missing authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site affecting versions from initial through 7.5.13. The flaw involves incorrectly configured access control security levels, allowing unauthorized actions. The vulnerability has a medium severity with a CVSS score of 5. No official patch or vendor advisory is provided in the data, and no known exploits are reported in the wild.

Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VideoWhisper Site Manager for ChatGPT, Claude, Codex: from n/a through 1.2.10.

Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data Manipulation.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12.

CVE-2026-27333 is a high-severity vulnerability in VideoWhisper.com's Paid Videochat Turnkey Site affecting versions up to and including 7.3.23. It involves unauthenticated deserialization of untrusted data, which can lead to full compromise of confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor.

CVE-2026-27053 is a critical vulnerability in VideoWhisper.com Broadcast Live Video versions prior to 7.1.3. It involves unauthenticated PHP object injection, classified under CWE-502 (Deserialization of Untrusted Data). This vulnerability allows remote attackers to execute arbitrary code without authentication. The CVSS score is 9.8, indicating a high severity with full impact on confidentiality, integrity, and availability.

Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Paid Videochat Turnkey Site: from n/a through 7.3.23.

Improper Control of Generation of Code ('Code Injection') vulnerability in VideoWhisper.Com Broadcast Live Video allows Code Injection. This issue affects Broadcast Live Video: from n/a before 7.1.3.