PT-2025-7827 · Unknown · Videowhisper Live Streaming Integration

Muhammad Yudha · Published 2025-02-25 · Updated 2025-02-27 · CVE-2025-26752

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions VideoWhisper Live Streaming Integration versions n/a through 6.2

Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows unauthorized access to files and directories outside the intended restricted directory.

Recommendations For versions n/a through 6.2, update to a version that fixes this issue to prevent Path Traversal attacks. If no specific fix is provided for these versions, ensure proper input validation and sanitization to restrict access to sensitive files and directories. As a temporary workaround, consider implementing additional security measures to limit directory access until a patch is available.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-26752

Affected Products

Videowhisper Live Streaming Integration

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-26752 · Security Note
• https://twitter.com/CveFindCom/status/1894395961293611222 · Twitter Post
• https://twitter.com/cybercronai/status/1895028843036971082 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/videowhisper-live-streaming-integration/vulnerability/wordpress-videowhisper-live-streaming-integration-plugin-6-2-arbitrary-file-deletion-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/videowhisper-live-streaming-integration/vulnerability/wordpress-videowhisper-live-streaming-integration-plugin-6-2-arbitrary-file-deletion-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1894399687081279861 · Twitter Post