CVE-2026-108476: WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Paid Videochat Turnkey Site pluginto a version that resolves this vulnerability.Fixed in 7.5.14
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is remotely reachable and requires an authenticated account with low privileges. No user interaction is required.
What is the potential impact if exploited?
The issue can allow a low-privileged user to bypass incorrectly configured access-control security levels. The provided severity vector indicates limited confidentiality impact, with no stated integrity or availability impact.
Which plugin versions are affected?
Paid Videochat Turnkey Site versions through 7.5.13 are affected. The earliest affected version is not specified.