VYPR

Videowhisper Video Conference Integration

by WordPress

CVEs (1)

  • CVE-2015-9271Oct 4, 2018
    risk 0.01cvss epss 0.04

    The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code,…