Lucene search
+L

16 matches found

NVD
NVD
•added 2026/10/18 11:16 a.m.•11 views

CVE-2026-110883

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5...

6.5CVSS0.00301EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/18 11:00 a.m.•34 views

CVE-2026-110883 WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5...

6.5CVSS0.00301EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/18 11:00 a.m.•26 views

CVE-2026-110883

The VideoWhisper.com 2Way VideoCalls and Random Chat WordPress plugin (webcam-2way-videochat) is vulnerable to a Broken Authentication issue (CWE-305) in versions up to and including 6.1.5 . This primary weakness allows for Authentication Abuse , potentially enabling unauthorized access to the ap...

6.5CVSS5.8AI score0.00301EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/18 11:00 a.m.•14 views

EUVD-2026-103427

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5...

6.5CVSS5.8AI score0.00301EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/18 11:00 a.m.•10 views

CVE-2026-110883 WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5...

6.5CVSS5.8AI score0.00301EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/18 12:00 a.m.•10 views

CVE-2026-110883: Authentication Bypass by Primary Weakness

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5...

6.5CVSS5.8AI score0.00301EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/18 12:00 a.m.•24 views

PT-2026-116596

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5...

6.5CVSS5.8AI score0.00301EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/16 10:37 a.m.•29 views

WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Anatoly Gorbounov x1will in WordPress Plugin 2Way VideoCalls and Random Chat versions = 6.1.5...

6.5CVSS5.8AI score0.00301EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/05 6:46 p.m.•4 views

Malware in bigops-videocalls

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview bigops-videocalls is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
NVD
NVD
•added 2021/08/16 7:15 p.m.•25 views

CVE-2021-34656

The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the vwsnotice function found in the /inc/requirements.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.2.7...

6.1CVSS0.00895EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/08/16 6:22 p.m.•41 views

CVE-2021-34656 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat <= 5.2.7 Reflected Cross-Site Scripting

The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the vwsnotice function found in the /inc/requirements.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.2.7...

6.1CVSS6.2AI score0.00895EPSS
SaveExploits1References2
CVE
CVE
•added 2021/08/16 6:22 p.m.•92 views

CVE-2021-34656

The CVE-2021-34656 entry documents a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “2Way VideoCalls and Random Chat – HTML5 Webcam Videochat”. The issue is triggered via the vws_notice function in the file ~/inc/requirements.php and affects versions up to and includin...

6.1CVSS6.1AI score0.00895EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/16 12:00 a.m.•12 views

CVE-2021-34656: Improper Neutralization of Input During Web Page Generation

The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the vwsnotice function found in the /inc/requirements.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.2.7...

6.1CVSS5.7AI score0.00895EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/08/16 12:00 a.m.•9 views

PT-2021-20624

Name of the Vulnerable Software and Affected Versions: 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin versions up to and including 5.2.7 Description: The issue allows attackers to inject arbitrary web scripts via the vws notice function found in the /inc/requirements.ph...

6.1CVSS0.00895EPSS
SaveExploits1References7
WPVulnDB
WPVulnDB
•added 2021/08/13 12:00 a.m.•50 views

2Way VideoCalls and Random Chat < 5.2.8 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the vwsnotice AJAX action found in the /inc/requirements.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.7AI score0.00895EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder