Videowhisper Paid Videochat Turnkey Site Remote Code Inclusion Vulnerability

Vulnerability

A code injection vulnerability allowing remote code inclusion has been identified in Videowhisper Paid Videochat Turnkey Site versions through 7.3.22. This vulnerability arises from improper control over code generation, enabling the execution of arbitrary code on the server.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where the affected plugin is installed.

Added: Oct 27, 2025, 2:28 AM
Updated: Oct 27, 2025, 2:28 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
7.4
remediation
0.0
relevance
0.8
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.