CVE-2014-1907

Published: Mar 6, 2014Modified: May 6, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_login.php or (2) delete arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_logout.php.

Affected (11)

Products: Videowhisper: Live Streaming Integration Plugin, Videowhisper Live Streaming Integration

Videowhisper

2 products

Live Streaming Integration Plugin

Videowhisper Live Streaming Integration

Configuration A

11 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Videowhisper Live Streaming Integration Plugin	Version 4.27.3
Videowhisper Live Streaming Integration Plugin	Version 4.27
Videowhisper Videowhisper Live Streaming Integration	Up to 4.27.4
Videowhisper Videowhisper Live Streaming Integration	Version 1.0.2
Videowhisper Videowhisper Live Streaming Integration	Version 2.0
Videowhisper Videowhisper Live Streaming Integration	Version 2.1
Videowhisper Videowhisper Live Streaming Integration	Version 2.2
Videowhisper Videowhisper Live Streaming Integration	Version 4.05
Videowhisper Videowhisper Live Streaming Integration	Version 4.07
Videowhisper Videowhisper Live Streaming Integration	Version 4.25.3
Videowhisper Videowhisper Live Streaming Integration	Version 4.25