| Package | Affected versions | Patched versions |
|---|---|---|
| live streaming integration plugin | = 4.27= 4.27.3 | |
| videowhisper live streaming integration | = 1.0.2= 2.0= 2.1= 2.2= 4.05= 4.07= 4.25= 4.25.3≤ 4.27.4 |
Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_login.php or (2) delete arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_logout.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free