CVE-2026-110883: WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability
Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
VideoWhisper.com 2Way VideoCalls and Random Chatto a version that resolves this vulnerability.Fixed in 6.1.6
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable with low attack complexity. It requires no authentication and no user interaction.
What is the potential impact if exploitation succeeds?
Successful exploitation may allow authentication abuse and can affect confidentiality and integrity to a low extent. No availability impact is indicated.
Which installations are affected?
The issue affects VideoWhisper.com 2Way VideoCalls and Random Chat versions through 6.1.5. The affected version range begins at an unspecified earlier version.