CVE-2014-1907 - CVE House
Back to Database
Status published Medium CVE-2014-1907

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration...

Vulnerability Description

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_login.php or (2) delete arbitrary files via a .. (dot dot) in the s parameter to ls/rtmp_logout.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-1907

Credits & Attribution

No credits recorded in the NVD database.

References

More from videowhisper

View All →
CVE-2025-8899
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation
High 8.8
CVE-2025-7812
Video Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command Injection
High 8.8
CVE-2025-62959
WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Remote Code Execution (RCE) vulnerability
Critical 9.1
CVE-2025-5937
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 - Cross-Site Request Forgery to Settings Reset
Medium 4.3
CVE-2025-48255
WordPress Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin <= 6.2.4 - Cross Site Request Forgery (CSRF) Vulnerability
Medium 4.3

Affected Vendor

videowhisper

View all reports →

Affected Software

live streaming integration plugin, videowhisper live streaming integration
Vulnerable Versions:
4.27, 4.27.3, 0, 1.0.2, 2.0, 2.1, 2.2, 4.05, 4.07, 4.25, 4.25.3

Timeline

Official Publish: March 6th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.