CVE-2026-107429— WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability
Quick assessment
Affected
VideoWhisper.com Paid Videochat Turnkey Site
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 VideoWhisper.com 的付费视频聊天开箱即用站点（Paid Videochat Turnkey Site）中，存在对输入中指定的数量验证不当的漏洞，可导致输入数据被操纵。该问题影响付费视频聊天开箱即用站点：从 n/a 到 7.5.12 版本。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| VideoWhisper.com | Paid Videochat Turnkey Site | ≤ 7.5.12 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-107429
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data Manipulation.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1284
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| VideoWhisper.com | Paid Videochat Turnkey Site | 0 ~ 7.5.12 | - |
|
II. Public POCs for CVE-2026-107429
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-107429
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-107429 (1)
Same Patch Batch · VideoWhisper.com · 2026-10-12 · 4 CVEs total
| CVE-2026-107430 | 5.4 MEDIUM | WordPress VideoWhisper Site Manager for ChatGPT, Claude, Codex plugin <= 1.2.10 - Broken A |
| CVE-2026-108476 | 5.0 MEDIUM | WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerabili |
| CVE-2026-108475 | 4.3 MEDIUM | WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability |
IV. Related Vulnerabilities
Same product: Paid Videochat Turnkey Site
-
CVE-2026-108476
WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Bro -
CVE-2026-57331
WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbi -
CVE-2026-27333
WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Des -
CVE-2026-24590
WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Bro -
CVE-2025-62959
WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Rem
Same vendor: VideoWhisper.com
-
CVE-2026-108475
WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Acce -
CVE-2026-108476
WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Bro -
CVE-2026-107430
WordPress VideoWhisper Site Manager for ChatGPT, Claude, Cod -
CVE-2026-27333
WordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Des -
CVE-2026-27053
WordPress Broadcast Live Video plugin < 7.1.3 - PHP Object I
Same weakness: CWE-1284
-
CVE-2026-109380
modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via Malform -
CVE-2026-106605
WordPress Flexible Quantity – Measurement Price Calculator f -
CVE-2026-107434
WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerabili -
CVE-2026-107565
Luksmeta: incomplete gap-boundary and overlap checks in luks -
CVE-2026-97275
WordPress BuildKit – Product Builder for WooCommerce – Custo
V. Comments for CVE-2026-107429
No comments yet