CVE-2023-25699: WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)
Published Apr 3, 2024
·Updated
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in VideoWhisper.Com VideoWhisper Live Streaming Integration allows OS Command Injection.This issue affects VideoWhisper Live Streaming Integration: from n/a through 5.5.15.
Affected Software
3 affected components
VideoWhisper Live Streaming Integration>=n/a, <=5.5.15
WordPress VideoWhisper Live Streaming Integration plugin<=5.5.15
VideoWhisper Videowhisper Live Streaming Integration Wordpress<5.5.16
Remediation
Information
Update to 5.5.16 or a higher version.
Event History
Apr 3, 2024
CVE Published
via MITRE·12:22 PM
Data Sourced
via MITRE·12:22 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 25, 57260
Event
via NVD·12:52 PM
Frequently Asked Questions
1
What is the severity of CVE-2023-25699?
CVE-2023-25699 has a critical severity level due to its potential for OS Command Injection.
2
How do I fix CVE-2023-25699?
To fix CVE-2023-25699, update VideoWhisper Live Streaming Integration to version 5.5.16 or later.
3
What versions of VideoWhisper are affected by CVE-2023-25699?
CVE-2023-25699 affects VideoWhisper Live Streaming Integration from n/a through version 5.5.15.
4
What kind of vulnerability is CVE-2023-25699?
CVE-2023-25699 is classified as an OS Command Injection vulnerability.
5
Is there a known exploit for CVE-2023-25699?
Yes, there are reports indicating that CVE-2023-25699 can be exploited to execute arbitrary commands on the server.