VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 6, 2014· Updated Jun 17, 2026

CVE-2014-1907

CVE-2014-1907

Description

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_login.php or (2) delete arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_logout.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Videowhisper/Videowhisper Live Streaming Integration11 versions
    cpe:2.3:a:videowhisper:live_streaming_integration_plugin:4.27:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:videowhisper:live_streaming_integration_plugin:4.27:*:*:*:*:*:*:*
    • cpe:2.3:a:videowhisper:live_streaming_integration_plugin:4.27.3:*:*:*:*:*:*:*
    • cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:*:*:*:*:*:*:*:*range: <=4.27.4
    • cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:4.05:*:*:*:*:*:*:*
    • cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:4.07:*:*:*:*:*:*:*
    • cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:4.25:*:*:*:*:*:*:*
    • cpe:2.3:a:videowhisper:videowhisper_live_streaming_integration:4.25.3:*:*:*:*:*:*:*
  • WordPress/Videowhisper Live Streaming Integrationllm-fuzzy
    Range: <4.29.5
    Package: https://wordpress.org/plugins/videowhisper-live-streaming-integration

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.