CVE-2026-107429: WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability
Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data Manipulation.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Paid Videochat Turnkey Site pluginto a version that resolves this vulnerability.Fixed in 7.5.13
Event History
Frequently Asked Questions
Who is exposed to this issue?
Instances of the VideoWhisper.com Paid Videochat Turnkey Site WordPress plugin are affected through version 7.5.12. The available data does not identify any unaffected earlier version.
What access does an attacker need?
The CVSS vector indicates that exploitation is network-accessible, requires low privileges, and does not require user interaction. This means an attacker needs an account or other low-privileged access recognized by the affected functionality.
What is the likely impact?
The reported impact is limited to integrity: an attacker may manipulate input data. The supplied CVSS vector indicates no confidentiality or availability impact.