Videowhisper Paid Videochat Turnkey Site Weak Password Recovery Vulnerability

A vulnerability exists in the Videowhisper Paid Videochat Turnkey Site, specifically in versions through 7.3.11, due to a weak password recovery mechanism. This flaw allows for the exploitation of password recovery processes, potentially leading to unauthorized access.

Impact

Exploitation of this vulnerability could allow attackers to bypass authentication mechanisms, gaining access to user accounts or administrative privileges on the site.

Remediation

Users of the Videowhisper Paid Videochat Turnkey Site should update to version 7.3.12 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.