CVE-2014-1906

CVE-2014-1906 concerns the VideoWhisper Live Streaming Integration plugin for WordPress. The vulnerability involves multiple cross-site scripting (XSS) flaws in the plugin prior to version 4.29.5, allowing remote attackers to inject arbitrary script or HTML through various parameters (lb_status.p...

CVE-2014-1907

VideoWhisper Live Streaming Integration plugin for WordPress (v4.x prior to 4.29.5) contains directory traversal vulnerabilities (CVE-2014-1907) that allow remote attackers to read arbitrary files via a .. in the s parameter to ls/rtmp_login.php and to delete arbitrary files via a .. in the s par...