CVE-2014-4570

🗓️ 02 Jul 2014 18:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

Multiple XSS vulnerabilities in VideoWhisper Video Presentation plugin for WordPress

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2014-4570	2 Jul 201418:00	–	cvelist
EUVD	EUVD-2014-4497	7 Oct 202500:30	–	euvd
NVD	CVE-2014-4570	2 Jul 201418:55	–	nvd
OpenVAS	WordPress VideoWhisper Video Presentation Cross Site Scripting Vulnerability	26 Aug 201400:00	–	openvas
Patchstack	WordPress VideoWhisper Video Presentation Plugin <= 3.30 - Multiple XSS	23 Jun 201400:00	–	patchstack
Prion	Cross site scripting	2 Jul 201418:55	–	prion
WPVulnDB	VideoWhisper Video Presentation 3.25 - vp/c_login.php room_name Parameter Reflected XSS	20 Sep 201419:39	–	wpvulndb

NVD

Node

videowhisper video_presentationRange≤3.25---wordpress

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
codevigilant	www.codevigilant.com/disclosure/wp-plugin-videowhisper-video-presentation-a3-cross-site-scripting-xss
securityfocus	www.securityfocus.com/bid/69511

Parameter	Position	Path	Description	CWE
room_name	query param	c_login.php	Cross-site scripting vulnerability via room_name parameter in c_login.php	CWE-79
room	query param	vp/index.php	Cross-site scripting vulnerability via room parameter in vp/index.php	CWE-79

06 May 2026 22:30Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.00197

cve-2014-4570 cross-site scripting xss videowhisper video presentation wordpress security vulnerabilities