CVE-2014-1907

2014-03-0615:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.4%

JSON

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files via a … (dot dot) in the s parameter to ls/rtmp_login.php or (2) delete arbitrary files via a … (dot dot) in the s parameter to ls/rtmp_logout.php.