WordPress Plugin Vulnerabilities

Video Comments Webcam Recorder < 1.92 - Unauthenticated Reflected XSS

Description

The Video Comments Webcam Recorder WordPress plugin was affected by an Unauthenticated Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
video-comments-webcam-recorder
Fixed in 1.92

References

CVE
CVE-2014-4567
URL
https://codevigilant.com/disclosure/wp-plugin-video-comments-webcam-recorder-a3-cross-site-scripting-xss/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
7d4206ea-8cbe-457c-a23e-14cbd92488a1

Timeline

Publicly Published
2014-06-12 (about 11 years ago)
Added
2019-12-28 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-12-31
Title
Custom Background Changer <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2022-02-16
Title
Flexi - Guest Submit < 4.20 - Reflected Cross-Site Scripting
Published
2025-01-31
Title
Hesabfa Accounting < 2.1.3 - Reflected Cross-Site Scripting
Published
2023-06-05
Title
Accordion & FAQ < 1.9.9 - Reflected XSS
Published
2021-08-25
Title
WP Map Block < 1.2.3 - Contributor+ Stored Cross-Site Scripting