CVE-2014-1907: Videowhisper Live Streaming Integration Plugin

Medium severity, CVSS 6.4. EPSS: 11.1% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_login.php or (2) delete arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_logout.php.

Affected products

• Videowhisper Live Streaming Integration Plugin: version 4.27 only; version 4.27.3 only
• Videowhisper Videowhisper Live Streaming Integration: up to and including 4.27.4; version 1.0.2 only; version 2.0 only; version 2.1 only; version 2.2 only; version 4.05 only; …

Published 2014-03-06. Last modified 2026-06-17.