[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGQg1PMkilsr9WZ73tgV4WnfNRMXapn7l1OWPCFG1tto":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":93,"crawl_stats":37,"alternatives":100,"analysis":196,"fingerprints":1671},"ppv-live-webcams","Paid Videochat Turnkey Site – HTML5 PPV Live Webcams","7.3.24","videowhisper","https:\u002F\u002Fprofiles.wordpress.org\u002Fvideowhisper\u002F","\u003Cp>Transform your WordPress site into a thriving pay-per-view (PPV) video chat service with the PPV Live Webcams plugin. This comprehensive solution allows performers from various sectors—be it education, counseling, or entertainment—to monetize their skills through live streaming, private consultations, and media sales. Designed for seamless operation across devices, this plugin integrates cutting-edge technologies like HTML5 WebRTC\u002FHLS for an optimal user experience without the need for additional downloads.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002Fdemo\u002F\" title=\"PaidVideochat Turnkey Site Demos\" rel=\"nofollow ugc\">Live Demos\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Build a turnkey pay per view (PPV) videochat, your own platform, where live service providers (consultants, advisors, performers) can market and sell their services remotely.\u003C\u002Fp>\n\u003Ch4>Platform Benefits\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Quick and Cost Effective: Launch a fully functional PPV video chat platform for a fraction of the cost and time required to develop from scratch.\u003C\u002Fli>\n\u003Cli>Leverage WordPress: Built on the reliable WordPress framework, this plugin offers ease of use and access to a vast selection of plugins, themes, community of developers.\u003C\u002Fli>\n\u003Cli>No Downloads Required: With a fully web-based setup, users can start streaming and viewing without the need for additional software or plugins. Optionally, performers can broadcasting using professional RTMP encoders like OBS, mobile Larix Broadcaster and clients can watch using same web interface.\u003C\u002Fli>\n\u003Cli>Multiple Revenue Streams: Generate income through various channels including private shows, group sessions, tips\u002Fgifts with goals, creator subscriptions, digital content, donations and crowdfunding. \u003C\u002Fli>\n\u003Cli>Wide Provider Support: Ideal for a broad range of service providers such as educators, trainers, advisors, and entertainers looking to monetize their expertise remotely. Solution can host remote paid videochat services from various types of providers including performers, adult models, consultants, teachers, personal trainers, tutors, therapists, mediums, tarot readers, spiritual healers, psychic readers, astrologists, herbalists, lawyers, financial \u002F tax \u002F legal advisors, technicians or other professionals that can provide remote assistance, interventions, shows and services.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more details see:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002F\" title=\"Paid VideoChat Homepage\" rel=\"nofollow ugc\">PaidVideoChat Solution HomePage\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Free Streaming Server Services\u003C\u002Fh4>\n\u003Cp>This type of solution requires specific live streaming server services. For quickly testing own setup, try these options:\u003Cbr \u002F>\n* Register for a \u003Ca href=\"https:\u002F\u002Fwebrtchost.com\u002Fhosting-plans\u002F#Streaming-Only\" rel=\"nofollow ugc\">Free Streaming account with WebRTC & RTMP\u002FHLS\u003C\u002Fa>\u003Cbr \u002F>\n* Install on own dedicated server or VPS the free open source \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fvideowhisper\u002Fvideowhisper-webrtc\" rel=\"nofollow ugc\">WebRTC Signaling Server\u003C\u002Fa> for basic P2P live streaming using STUN\u002FTURN (as alternative to WowzaSE live streaming)\u003C\u002Fp>\n\u003Ch4>HTML5 Videochat\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>responsive app, versatile, mobile friendly, 100% web based (no Flash, no downloads) room link \u003C\u002Fli>\n\u003Cli>live streaming & chat, public lobby for presales or paid group sessions\u003C\u002Fli>\n\u003Cli>video conference meeting with multiple webcams\u003C\u002Fli>\n\u003Cli>collaboration: file sharing, presentation\u003C\u002Fli>\n\u003Cli>private 2 way video calls, on request or setup with locked link\u003C\u002Fli>\n\u003Cli>pay per minute or free, in private calls and group videochat shows\u003C\u002Fli>\n\u003Cli>gifts\u002Fdonations with multiple goals and revenue sharing when multiple checked in performers\u003C\u002Fli>\n\u003Cli>Lovense browser\u002Fextension integration: notify API on tips to activate toy, show listings with toy\u003C\u002Fli>\n\u003Cli>random room with Next button\u003C\u002Fli>\n\u003Cli>random match mode with custom matching criteria (2 way)\u003C\u002Fli>\n\u003Cli>on demand recording of live video streams, with option to stack in save recording (conferencing)\u003C\u002Fli>\n\u003Cli>broadcast with RTMP encoders like OBS with SnapCamera, mobile Larix Broadcaster (HTML5 HLS playback)\u003C\u002Fli>\n\u003Cli>screen sharing, including mixing audio with microphone\u003C\u002Fli>\n\u003Cli>audio\u002Fvideo\u002Fscreen recording messages, emoticons, replies in chat\u003C\u002Fli>\n\u003Cli>push performer stream to 3rd party RTMP platforms\u003C\u002Fli>\n\u003Cli>multi language text chat: integrates DeepL API for live translations on request\u003C\u002Fli>\n\u003Cli>multi-view with RTSP IP camera re-streaming support (can switch live between webcam and streams)\u003C\u002Fli>\n\u003Cli>scale 1 to many using Wowza SE as relay and\u002For use P2P WebRTC + STUN\u002FTURN (new)\u003C\u002Fli>\n\u003Cli>generates & uploads camera snapshots (and no longer relies on FFmpeg as external streams)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Turnkey Site\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Custom (editable) frontend registration types: Performer\u002FTeacher\u002FBroadcaster\u002FTutor\u002FConsultant\u002FModel, Client\u002FStudent\u002FViewer\u002FFan, Studio\u002FCompany\u002FBrand\u002FClinic\u002FSchool\u003C\u002Fli>\n\u003Cli>Custom videochat rooms (Webcam\u002FRoom\u002FConference\u002FMeeting\u002FVenue\u002FShop) and editable list of Chat Modes (Free Chat, Paid Group Show, Video Conference, Calls Only, Broadcast)\u003C\u002Fli>\n\u003Cli>HTML5 Videochat App interface: Live Video Streaming, Request Private Call, 2 Way Video Calls, Tips\u002FGifts, Video Conference Split Screen, Instant File Sharing, Presentation\u003C\u002Fli>\n\u003Cli>AJAX webcams list with custom template and CSS\u003C\u002Fli>\n\u003Cli>Public and private Pay Per Minute videochat shows\u003C\u002Fli>\n\u003Cli>PPV settings (cost per minute, grace time) \u003C\u002Fli>\n\u003Cli>Gifts\u002FTips\u002FDonations (customizable amount, label, sound) in HTML and Advance interface and customizable gift goals\u003C\u002Fli>\n\u003Cli>Paid Questions\u002FMessages, performer gets paid on reply\u003C\u002Fli>\n\u003Cli>Integrates WP SMS & WP Twilio Core for notifications or questions\u002Fmessages\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpaid-membership\u002F\" title=\"MicroPayments\u002FFansPaysite\" rel=\"ugc\">MicroPayments\u002FFansPaysite\u003C\u002Fa> wallet integration: sell creator subscriptions, digital content, membership with tokens & token packages with WooCommerce gateways\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoo-wallet\u002F\" rel=\"ugc\">TeraWallet\u003C\u002Fa> tokens wallet integration\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmycred\u002F\" rel=\"ugc\">myCRED Wallet\u003C\u002Fa> credits wallet integration\u003C\u002Fli>\n\u003Cli>Lobby access permissions (access lists or pay per room)\u003C\u002Fli>\n\u003Cli>HTML5 Live Streaming interface for broadcast and playback on mobiles from Flash PC app broadcasts\u003C\u002Fli>\n\u003Cli>HLS & MPEG-Dash transcoding for performer stream (watch live video stream from iOS\u002FAndroid mobile)\u003C\u002Fli>\n\u003Cli>Customizable for a multitude of user interaction and billing scenarios\u003C\u002Fli>\n\u003Cli>RTMP Admin tool to monitor live sessions and spy on cams on RTMP server\u003C\u002Fli>\n\u003Cli>100% php plugin source code\u003C\u002Fli>\n\u003Cli>Abides to WP coding and security standards\u003C\u002Fli>\n\u003Cli>Archive streams and import with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fvideo-share-vod\u002F\" title=\"Video Share \u002F Video On Demand\" rel=\"ugc\">Video Share VOD\u003C\u002Fa> plugin\u003C\u002Fli>\n\u003Cli>Performers can import and upload videos to show on their page\u003C\u002Fli>\n\u003Cli>Video teaser shows on profile page and preview in listings (on hover)\u003C\u002Fli>\n\u003Cli>Performers can upload pictures to show in a gallery on their page (with \u003Ca href=\"https:\u002F\u002Fvideochat-scripts.com\u002Fpicture-gallery-plugin\u002F\" title=\"WordPress Picture Gallery Plugin\" rel=\"nofollow ugc\">Picture Gallery\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Sell Pictures\u002FVideos (with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpaid-membership\u002F\" title=\"MicroPayments - Paid Membership, Content\" rel=\"ugc\">MicroPayments – Paid Membership, Content\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frate-star-review\u002F\" title=\"Rate Star Review - AJAX Reviews for Content, with Star Ratings\" rel=\"ugc\">Reviews with Star Ratings\u003C\u002Fa> integration\u003C\u002Fli>\n\u003Cli>Performers can restrict access from specific countries to their listings and webcam page\u003C\u002Fli>\n\u003Cli>Performers can set an access price or password for room page\u003C\u002Fli>\n\u003Cli>Fake Live Performers: Schedule videos to play in loop as if performer was live\u003C\u002Fli>\n\u003Cli>Custom listing fields\u002Fquestions (unlimited fields can be configured from backend)\u003C\u002Fli>\n\u003Cli>Paid Group Modes: define group chat modes from backend\u003C\u002Fli>\n\u003Cli>Multi Performer Checkin: Multiple performers can be checked in same webcam channel for sharing paid group session profits\u003C\u002Fli>\n\u003Cli>GeoBlocking: globally (by admin) or per webcam (by performer), block countries\u002Fregions\u002Fcities with GeoIP\u003C\u002Fli>\n\u003Cli>Performer\u002FStudio Approval: Administrative records with custom fields for review\u003C\u002Fli>\n\u003Cli>Multi-Person account support (partners, couples, groups): collect personal records for each person\u003C\u002Fli>\n\u003Cli>Moderators that can access group chats in secret without generating charges\u003C\u002Fli>\n\u003Cli>Daily free time limit for free chat, visitors\u003C\u002Fli>\n\u003Cli>Auto import webcam snapshots in picture galleries\u003C\u002Fli>\n\u003Cli>Archive and import broadcasts from group mode sessions\u003C\u002Fli>\n\u003Cli>Collaboration mode support: video conferencing, file sharing, present videos\u002Fimages\u002Fdocuments\u003C\u002Fli>\n\u003Cli>Random videochat (Next button to quickly move to a different performer room without reloading page\u002Finterface)\u003C\u002Fli>\n\u003Cli>BuddyPress Groups integration: Each group has own room and administrators become performers (room moderators)\u003C\u002Fli>\n\u003Cli>BuddyPress Activity integration: create rooms, go live in room\u003C\u002Fli>\n\u003Cli>BuddyPress Profile integration for performers: list live rooms (updated with AJAX), [paid] video questions\u003C\u002Fli>\n\u003Cli>WooCommerce Products integration: Select products to show on room profile\u003C\u002Fli>\n\u003Cli>Google reCAPTCHA v3 integration for frontend registration, login\u003C\u002Fli>\n\u003Cli>Custom menus for performer, client, studio or regular members\u003C\u002Fli>\n\u003Cli>SightEngine integration for live streaming moderation based on stream snapshots (detect nudity, weapons, drugs, violence, etc)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Hosting Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>This plugin has \u003Ca href=\"https:\u002F\u002Fvideowhisper.com\u002F?p=Requirements\" title=\"Live Streaming Requirements\" rel=\"nofollow ugc\">requirements\u003C\u002Fa> beyond regular WordPress hosting specifications: specific live streaming servers, certificates, licensing, tools and configuration for HTML5 live camera streaming.\u003C\u002Fli>\n\u003Cli>For testing, register for a \u003Ca href=\"https:\u002F\u002Fwebrtchost.com\u002Fhosting-plans\u002F#Streaming-Only\" rel=\"nofollow ugc\">Free Streaming account with WebRTC & RTMP\u002FHLS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>A new \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fvideowhisper\u002Fvideowhisper-webrtc\" rel=\"nofollow ugc\">WebRTC Signaling Server\u003C\u002Fa>  is available for basic live streaming functionality using TURN servers. It’s in early development stage and not recommended for production use.\u003C\u002Fli>\n\u003Cli>Some advanced features require executing server commands for accessing tools like FFmpeg. This involves special configuration and security precautions on web server. By default executing commands (and these features) are disabled.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Home Page\u003C\u002Fh4>\n\u003Cp>For online site demos, detailed software requirements, installation and setup instructions see plugin homepage:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002F\" title=\"Paid VideoChat Homepage\" rel=\"nofollow ugc\">PaidVideoChat HomePage\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\" title=\"PPV Live Webcams \u002F Paid Videochat Plugin HomePage\" rel=\"nofollow ugc\">WordPress PPV Live Webcams Plugin HomePage\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Consulting Services\u003C\u002Fh4>\n\u003Cp>Get complete consulting services to run your live streaming site:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fconsult.videowhisper.com\" title=\"Consult VideoWhisper\" rel=\"nofollow ugc\">Consult VideoWhisper\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>How it Works\u003C\u002Fh4>\n\u003Cp>Performers join to earn money. They turn on their webcams and hang out in public (presale) rooms  waiting for members to chat.  Performers are listed on a page (live performers show first) and site visitors can join them.\u003C\u002Fp>\n\u003Cp>Paying clients can invite performers to do private video chat shows and pay per minute. They first need to register as clients and add some money to their virtual wallet on site to be able to request private shows.\u003C\u002Fp>\n\u003Cp>Payments go from clients to site owner’s account depending on billing gateway (multiple supported).  Site owner can see earnings for each performer and send payments as necessary.\u003C\u002Fp>\n\u003Ch4>Billing\u003C\u002Fh4>\n\u003Cp>Clients can prepay credits that can be used for ppv chat. Billing is supported with TeraWallet (WooCommerce Wallet) and\u002For myCRED plugin that includes PayPal Standard, Skrill (Moneybookers), NETbilling, Zombaio, BitPay (bitcoin).  Other payment modules are available for extra: 2checkout, ComproPago, CoinBase, CoinPayments, PayFast, Payza, Robokassa, Stripe, WePay.\u003Cbr \u002F>\nWooWallet supports free and premium payment gateways: PayPal (Standard, Checkout), Stripe (CC, Apple Pay, Google Pay, SEPA, Bancontact, Sofort, Giropay, EPS, iDeal, Przelewy24, Alipay, Multibanco),  Square (CC U.S, Canada, Australia, Japan and the UK), Amazon Pay, PayFast, Venmo, eWay (SG, MY, HK, AU, NZ), Klarna (now, later, slice), Authorize.Net, SagePay (UK), WorldPay, 2 Checkout.\u003C\u002Fp>\n\u003Cp>Payouts can be made manually by site owner, with the Payout Tool that generates mass CSV payout lists (for processors like Paypal, Skrill) or with 3rd party plugins\u002Faddons.\u003C\u002Fp>\n\u003Ch3>Demos\u003C\u002Fh3>\n\u003Cp>WordPress turnkey site demos on:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002Fdemo\u002F\" title=\"PaidVideochat Turnkey Site Demo\" rel=\"nofollow ugc\">PaidVideochat Turnkey Site Demo\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fdemo.fanspaysite.com\" title=\"FansPaySite Demo\" rel=\"nofollow ugc\">FansPaySite Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Simplified demonstrative setups for testing videochat app without registration:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fdemo.videowhisper.com\u002Fvideocall-html5-videochat-php\u002F\" rel=\"nofollow ugc\">Video Call PHP \u002F HTML5 Videochat on Wowza SE\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fdemo.videowhisper.com\u002Fp2p-html5-videocall\u002F\" rel=\"nofollow ugc\">Video Call PHP \u002F HTML5 Videochat on VideoWhisper WebRTC\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fdemo.videowhisper.com\u002Fhtml5-videochat-php\u002F\" rel=\"nofollow ugc\">Live Streaming PHP \u002F HTML5 Videochat on Wowza SE\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fdemo.videowhisper.com\u002Fvws-html5-livestreaming\u002F\" rel=\"nofollow ugc\">Live Streaming PHP \u002F HTML5 Videochat on VideoWhisper WebRTC\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fdemo.videowhisper.com\u002Fcam-recorder-html5-video-audio\u002F\" rel=\"nofollow ugc\">Cam\u002FMic Recorder HTML5 – Standalone\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002F2wayvideochat.com\u002Frandom-videochat\u002F\" rel=\"nofollow ugc\">Random Videochat\u003C\u002Fa>\u003C\u002Fp>\n","Launch a PPV live webcam platform with real-time interaction and robust monetization for performers.",30,93847,84,22,"2026-02-17T10:57:00.000Z","6.8.5","5.1","7.4",[20,21,22,7,23],"pay-per-minute","video-call","videochat","webcam","https:\u002F\u002Fpaidvideochat.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fppv-live-webcams.zip",82,4,0,"2026-03-06 16:42:12","2026-03-15T15:16:48.613Z",[32,48,62,78],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":39,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2025-8899","paid-videochat-turnkey-site-html5-ppv-live-webcams-authenticated-author-privilege-escalation","Paid Videochat Turnkey Site – HTML5 PPV Live Webcams \u003C= 7.3.20 - Authenticated (Author+) Privilege Escalation","The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.20. This is due to videowhisper_register_form() function not restricting user roles that can be set during registration. This makes it possible for authenticated attackers, with Author-level access and above, to create posts\u002Fpages with the registration form and administrator set as the role and subsequently use that form to register an administrator account. This can also be exploited by contributors, but is far less likely to be successful because an administrator would need to approve the form with the administrator role for the attack to be successful.",null,"\u003C=7.3.20","7.3.21","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Privilege Management","2026-03-07 06:11:59",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ff71fc65f-cdc1-4f20-b37e-849ade49ee41?source=api-prod",1,{"id":49,"url_slug":50,"title":51,"description":52,"plugin_slug":4,"theme_slug":37,"affected_versions":53,"patched_in_version":6,"severity":40,"cvss_score":54,"cvss_vector":55,"vuln_type":56,"published_date":57,"updated_date":58,"references":59,"days_to_patch":61},"CVE-2025-62959","paid-videochat-turnkey-site-authenticated-admin-remote-code-execution","Paid Videochat Turnkey Site \u003C= 7.3.23 - Authenticated (Admin+) Remote Code Execution","The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.3.23. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server.","\u003C=7.3.23",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Control of Generation of Code ('Code Injection')","2025-10-16 00:00:00","2026-02-26 15:20:58",[60],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F712e9341-5bd5-4b9c-891c-048ccec1ba45?source=api-prod",134,{"id":63,"url_slug":64,"title":65,"description":66,"plugin_slug":4,"theme_slug":37,"affected_versions":67,"patched_in_version":68,"severity":69,"cvss_score":70,"cvss_vector":71,"vuln_type":72,"published_date":73,"updated_date":74,"references":75,"days_to_patch":77},"CVE-2025-31380","paid-videochat-turnkey-site-authentication-bypass","Paid Videochat Turnkey Site \u003C= 7.3.11 - Authentication Bypass","The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 7.3.11. This is due to the plugin not using a cryptographically secure token for logging in a user. This makes it possible for unauthenticated attackers to log in as other users after brute-forcing a valid token.","\u003C=7.3.11","7.3.12","critical",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Authentication Bypass Using an Alternate Path or Channel","2025-04-10 00:00:00","2025-04-17 13:20:32",[76],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fde302cfb-5eea-4571-9bb3-44ad00262e14?source=api-prod",8,{"id":79,"url_slug":80,"title":81,"description":82,"plugin_slug":4,"theme_slug":37,"affected_versions":83,"patched_in_version":84,"severity":69,"cvss_score":85,"cvss_vector":86,"vuln_type":87,"published_date":88,"updated_date":89,"references":90,"days_to_patch":92},"CVE-2025-22663","paid-videochat-turnkey-site-html5-ppv-live-webcams-unauthenticated-arbitrary-file-deletion","Paid Videochat Turnkey Site – HTML5 PPV Live Webcams  \u003C= 7.2.16 - Unauthenticated Arbitrary File Deletion","The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 7.2.16. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).","\u003C=7.2.16","7.3.1",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","2025-02-03 00:00:00","2025-02-26 22:09:40",[91],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F5feb08ff-3e1a-4a5c-88d9-1c07409d0c8c?source=api-prod",24,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":94,"total_installs":95,"avg_security_score":96,"avg_patch_time_days":97,"trust_score":98,"computed_at":99},12,1270,93,1072,74,"2026-04-04T15:35:22.704Z",[101,120,143,160,180],{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":28,"downloaded":109,"rating":110,"num_ratings":47,"last_updated":111,"tested_up_to":112,"requires_at_least":113,"requires_php":114,"tags":115,"homepage":117,"download_link":118,"security_score":119,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"html5-videochat","HTML5 VideoChat","21.7","Costantino","https:\u002F\u002Fprofiles.wordpress.org\u002Fcstsoftwarecorp\u002F","\u003Cp>The \u003Cstrong>HTML5 VideoChat\u003C\u002Fstrong> plugin enables you to embed video chat from \u003Ca href=\"https:\u002F\u002Fwww.html5-videochat.com\u002F\" rel=\"nofollow ugc\">html5-videochat.com\u003C\u002Fa> directly into your WordPress blog. Once activated, you will receive an email containing your password.\u003C\u002Fp>\n\u003Cp>To integrate audio and video chat, simply insert the provided shortcode into your page or post.\u003C\u002Fp>\n\u003Ch3>Watch the demo videos:\u003C\u002Fh3>\n\u003Ch4>English Presentation\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"560\" height=\"315\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F9uV-lPN2uHA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>Italian Presentation\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"560\" height=\"315\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FC6w-7oIreOE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>The plugin leverages the powerful video chat functionality provided by the external service \u003Cstrong>html5-videochat.com\u003C\u002Fstrong>. When activated and configured, iframes are embedded in your website, connecting to the following external service:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Video Chat Service:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.html5-videochat.com\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.html5-videochat.com\u002F\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To ensure transparency and inform users about the data usage, please carefully read the following documents:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.html5-videochat.com\u002Findex.php?\u002Finfo-collegamenti\u002Fterms-and-conditions\u002F\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.html5-videochat.com\u002Findex.php?\u002Finfo-collegamenti\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Domain and Third-Party Service Documentation\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Plugin Domain:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.html5-videochat.com\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.html5-videochat.com\u002F\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Third-Party Service Endpoint:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.html5-videochat.com\u002Findex.php?\u002Fwordpress\u002Fget-json-wp\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.html5-videochat.com\u002Findex.php?\u002Fwordpress\u002Fget-json-wp\u002F\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This endpoint is responsible for retrieving and processing user data, integrating WordPress users with \u003Cstrong>html5-videochat.com\u003C\u002Fstrong>. It handles POST requests, user authentication, and profile synchronization.\u003C\u002Fp>\n\u003Ch3>Contact\u003C\u002Fh3>\n\u003Cp>For further assistance, email \u003Cstrong>ilfreeif@gmail.com\u003C\u002Fstrong>.\u003C\u002Fp>\n","HTML5 VideoChat is a WordPress plugin that allows you to easily integrate video chat into your blog.",1560,20,"2025-03-19T18:50:00.000Z","6.7.5","6.7","",[116,20,21,22,23],"conference","https:\u002F\u002Fwww.html5-videochat.com\u002Findex.php?\u002Fintegrazione\u002Fwordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhtml5-videochat.zip",92,{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":130,"num_ratings":131,"last_updated":132,"tested_up_to":133,"requires_at_least":134,"requires_php":114,"tags":135,"homepage":139,"download_link":140,"security_score":141,"vuln_count":47,"unpatched_count":28,"last_vuln_date":142,"fetched_at":30},"html5-chat","HTML5 Chat","1.08","proxymis","https:\u002F\u002Fprofiles.wordpress.org\u002Fproxymis\u002F","\u003Cp>HTML5 Chat allows you to quickly add a live audio and video chat to any WordPress page or post.\u003C\u002Fp>\n\u003Cp>The plugin embeds the HTML5-based chat service from html5-chat.com, without requiring any technical configuration.\u003Cbr \u002F>\nOnce activated, you can insert the chat anywhere using a simple shortcode.\u003C\u002Fp>\n\u003Cp>Key features:\u003Cbr \u002F>\n– Live audio & video chat (HTML5)\u003Cbr \u002F>\n– Simple shortcode integration\u003Cbr \u002F>\n– Customizable width & height\u003Cbr \u002F>\n– Fullscreen mode support\u003Cbr \u002F>\n– Admin moderation tools\u003Cbr \u002F>\n– CSS customization via admin panel\u003Cbr \u002F>\n– Works on desktop and mobile browsers\u003C\u002Fp>\n\u003Cp>After activation, your chat access credentials are automatically sent to your WordPress admin email.\u003C\u002Fp>\n\u003Cp>Security note:\u003Cbr \u002F>\nVersion 1.07 includes a security fix for a stored Cross-Site Scripting (XSS) vulnerability in shortcode attributes (CVE-2024-12451).\u003Cbr \u002F>\nCredit: Peter Thaleikis \u002F Wordfence.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For questions or assistance, please contact:\u003Cbr \u002F>\ncontact@proxymis.com\u003C\u002Fp>\n","HTML5 Chat is a WordPress plugin that lets you easily embed a real-time audio & video chat into your website using HTML5 technology.",90,13110,66,9,"2026-01-20T10:33:00.000Z","6.9.4","4.5",[136,137,22,138,23],"chat","video-chat","visiochat","https:\u002F\u002Fhtml5-chat.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhtml5-chat.zip",99,"2025-01-30 00:40:39",{"slug":144,"name":145,"version":146,"author":7,"author_profile":8,"description":147,"short_description":148,"active_installs":149,"downloaded":150,"rating":28,"num_ratings":28,"last_updated":151,"tested_up_to":112,"requires_at_least":152,"requires_php":18,"tags":153,"homepage":157,"download_link":158,"security_score":119,"vuln_count":47,"unpatched_count":28,"last_vuln_date":159,"fetched_at":30},"video-comments-webcam-recorder","HTML5 Webcam\u002FScreen\u002FMic Recorder for Video Comments and Forms","2.2.6","\u003Cp>HTML5 Webcam Microphone Recorder Forms is a powerful, easy-to-use plugin that allows you to add video and audio recording capabilities directly into WordPress comment forms and custom forms. With this plugin, users can record from their webcam, screen, microphone and submit their recordings as part of their comment or form submission.\u003C\u002Fp>\n\u003Cp>Key Features\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Seamless Form Integration: Adds a recording field to your forms with a simple shortcode. Users can easily record video or audio and submit it alongside their comments or form entries.\u003C\u002Fli>\n\u003Cli>Video Comments: Includes a button within the comments form for users to add video or audio recordings. This feature can be toggled on or off in the plugin settings. Submitted recordings are displayed as links that open in a new page or embed.\u003C\u002Fli>\n\u003Cli>Customizable Recorder: The recording interface appears in a user-friendly dialog box and allows multiple recordings. Recordings are uploaded to your server and can be automatically added to the Media Library or processed\u002Fpublished using the \u003Ca href=\"https:\u002F\u002Fvideosharevod.com\" rel=\"nofollow ugc\">Video Share VOD\u003C\u002Fa> plugin.\u003C\u002Fli>\n\u003Cli>Flexible Recording Options: Supports various recording types, including:\u003C\u002Fli>\n\u003Cli>\n\u003Cul>\n\u003Cli>Webcam + Microphone Video\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cul>\n\u003Cli>Screen + Microphone Video\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cul>\n\u003Cli>Microphone-only Audio\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Simple Integration with Other Plugins: Perfect for use in more advanced setups like paid questions or message forms. Works well with the \u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002F\" rel=\"nofollow ugc\">PaidVideochat – Video Services Site\u003C\u002Fa> plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Note: Recordings are saved in formats supported by the user’s browser (e.g., MP4, WebM). Please be aware that some formats may not be compatible with all browsers.\u003C\u002Fp>\n\u003Cp>This plugin utilizes the latest HTML5 technology, based on the HTML5 Videochat \u002F Cam Recorder web app, ensuring fast and reliable performance for both video and audio recording.\u003C\u002Fp>\n\u003Cp>Transform your WordPress site by enabling rich, multimedia user interactions with this intuitive and versatile recording plugin.\u003C\u002Fp>\n\u003Cp>This web app implementation is based on \u003Ca href=\"https:\u002F\u002Fdemo.videowhisper.com\u002Fcam-recorder-html5-video-audio\u002F\" rel=\"nofollow ugc\">HTML5 Videochat \u002F Cam Recoder\u003C\u002Fa> .\u003C\u002Fp>\n\u003Cp>Sample integration: Paid Questions \u002F Messages forms can include recordings in \u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002F\" rel=\"nofollow ugc\">PaidVideochat – Video Services Site\u003C\u002Fa> plugin.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Display HTML5 Recorder with shortcode [[videowhisper_recorder_inline field=”recordings” add_field=”1″ label=””]].\u003Cbr \u002F>\nWhen a recording is sent to server, application calls window.VideoWhisper.recoderUploadCompleted([filename]). Unless field parameter is blank, the function is also implemented and adds the filename to value of field with provided id. Field is added by default unless disabled with add_field parameter. A field label can be included.\u003Cbr \u002F>\nThis web app implementation is based on \u003Ca href=\"https:\u002F\u002Fdemo.videowhisper.com\u002Fcam-recorder-html5-video-audio\u002F\" rel=\"nofollow ugc\">HTML5 Videochat \u002F Cam Recoder\u003C\u002Fa> .\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fvideowhisper.com\u002Ftickets_submit.php\" rel=\"nofollow ugc\">Contact VideoWhisper Technical Support\u003C\u002Fa> for clarifications\u003C\u002Fli>\n\u003C\u002Ful>\n","Easily add webcam, screen, and mic recordings to WordPress comments and forms with this shortcode-enabled plugin for video and audio submissions.",60,12593,"2025-04-01T06:10:00.000Z","5.0",[154,155,156,7,23],"comments","html5","recorder","https:\u002F\u002Ffanspaysite.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvideo-comments-webcam-recorder.zip","2014-06-12 00:00:00",{"slug":161,"name":162,"version":163,"author":164,"author_profile":165,"description":166,"short_description":167,"active_installs":168,"downloaded":169,"rating":170,"num_ratings":171,"last_updated":172,"tested_up_to":16,"requires_at_least":173,"requires_php":174,"tags":175,"homepage":178,"download_link":179,"security_score":170,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"easy-video-call","Easy Video Call [GWE]","2.0.2","Mukul Hossain","https:\u002F\u002Fprofiles.wordpress.org\u002Fmukulwp\u002F","\u003Cp>Easy Video Call plugin was created using Agora’s API. To use this plugin, you have to create an account on agora.com. Note that without an SSL certificate on your website, this plugin won’t work.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Through a shortcode, you can display the ‘Start Call’ button anywhere on your website.\u003C\u002Fli>\n\u003Cli>You can turn on or off your camera.\u003C\u002Fli>\n\u003Cli>You can mute or unmute your speaker.\u003C\u002Fli>\n\u003C\u002Ful>\n","Easy Video Call is a simple plugin for making video call easily. To display the video call option simply add this [easy-video-call] shortcode inside y …",50,2455,100,2,"2025-07-22T18:27:00.000Z","4.7","7.0",[176,136,177,21,22],"agora","livechat","https:\u002F\u002Fgetwebexperts.com\u002Feasy-video-call","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-video-call.zip",{"slug":181,"name":182,"version":183,"author":7,"author_profile":8,"description":184,"short_description":185,"active_installs":11,"downloaded":186,"rating":170,"num_ratings":187,"last_updated":188,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":189,"homepage":193,"download_link":194,"security_score":141,"vuln_count":171,"unpatched_count":28,"last_vuln_date":195,"fetched_at":30},"webcam-2way-videochat","2Way VideoCalls and Random Chat – HTML5 Webcam Videochat","5.4.12","\u003Cp>Easily set up video call rooms or random video chat from WordPress. 100% HTML5, no downloads required. Just share the room link for instant connection.\u003C\u002Fp>\n\u003Cp>This plugin implements 2 videochat modes:\u003Cbr \u002F>\n1. Private 2 Way Video Call Rooms\u003Cbr \u002F>\n2. Random Videochat with Country\u002FGender Matchmaking\u003C\u002Fp>\n\u003Cp>New: P2P WebRTC is now supported with the new VideoWhisper WebRTC server + STUN\u002FTURN, recommended for optimal latency and quality in private calls.\u003Cbr \u002F>\nGet a Free “Developers” account to test P2P WebRTC & STUN\u002FTURN, from \u003Ca href=\"https:\u002F\u002Fwebrtchost.com\u002Fhosting-plans\u002F#WebRTC-Only\" title=\"WebRTC Host \u002F P2P WebRTC with STUN\u002FTURN\" rel=\"nofollow ugc\">WebRTC Host\u003C\u002Fa>. Limited availability.\u003C\u002Fp>\n\u003Cp>VideoCall rooms can be managed by users from frontend and shared by access link.\u003Cbr \u002F>\nRandom videochat is accessible on a custom page, where users are randomly matched with other users that access that page.\u003Cbr \u002F>\nVideochat pages should be added to cache exceptions.\u003C\u002Fp>\n\u003Ch4>Live Site \u002F Demo\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002F2wayvideochat.com\u002Frandom-videochat\u002F\" title=\"2Way Videochat Random Chat\" rel=\"nofollow ugc\">2Way Videochat – Random Chat\u003C\u002Fa> – random videochat\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002F2wayvideochat.com\u002Fvideo-calls\u002F\" title=\"2Way Videochat Calls\" rel=\"nofollow ugc\">2Way Videochat – Calls\u003C\u002Fa> – web\u002Fmobile video calls, registration required to setup\u003C\u002Fp>\n\u003Ch4>HTML5 2 Way Videochat : Video Calls\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>100% web based HTML5, no downloads, no app store approval required\u003C\u002Fli>\n\u003Cli>1 to 1, 2 way private video chat\u003C\u002Fli>\n\u003Cli>Send video\u002Faudio\u002Fscreen recordings, emoticons in text chat\u003C\u002Fli>\n\u003Cli>Next button in Random Videochat to move to next match without page reload\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Random Videochat (Roulette)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Random videochat page, to get matched with other user online\u003C\u002Fli>\n\u003Cli>Next button in app to move to next match, without reloading page\u003C\u002Fli>\n\u003Cli>Matchmaking by Gender, Country (example: I am Male from US looking for Female from any country.)\u003C\u002Fli>\n\u003Cli>Custom Gender options (plugin settings)\u003C\u002Fli>\n\u003Cli>AJAX filter dropdows, updating without page reload\u003C\u002Fli>\n\u003Cli>Automatically select own country by GeoIP if available\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WordPress 2Way VideoCalls and Random Chat – HTML5 Webcam Videocha Plugin\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Quickly add 2 way video call rooms and random chat to WP site\u003C\u002Fli>\n\u003Cli>Access permissions (everybody, members, list)\u003C\u002Fli>\n\u003Cli>Members can create and manage rooms\u003C\u002Fli>\n\u003Cli>Menus in admin bar\u003C\u002Fli>\n\u003Cli>Access list per room\u003C\u002Fli>\n\u003Cli>Widget with active rooms list and entry\u003C\u002Fli>\n\u003Cli>Pages for room management, random videochat\u003C\u002Fli>\n\u003Cli>Option to redirect user to videochat setup page after login\u003C\u002Fli>\n\u003Cli>Option to automatically create a video call room for each user\u003C\u002Fli>\n\u003Cli>Easy translation with .po file and settings\u003C\u002Fli>\n\u003Cli>Integrates Mobile App (if available for iOS\u002FAndroid)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Setup web based HTML5 videocalls on a WordPress site using \u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002Fhtml5-videochat\u002F\" title=\"100% Web Based HTML5 Videochat\" rel=\"nofollow ugc\">VideoWhisper HTML5 Videochat\u003C\u002Fa>.\u003Cbr \u002F>\nA Video Chat page is added to the website where members can create and manage their rooms and also a page for random videochat. Can be disabled from settings. Functionality can be implemented as shortcode.\u003C\u002Fp>\n\u003Cp>There is a settings page with multiple parameters and permissions. Who can setup rooms and access application can be configured (everybody, members, list of members\u002Froles).\u003C\u002Fp>\n\u003Cp>For a more advanced setup with monetization including pay per minute & gifts, see \u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\" title=\"PaidVideochat - WP Pay Per Minute Webcams Turnkey Site Platform\" rel=\"nofollow ugc\">PaidVideochat Pay Per Minute Webcams Turnkey Site Platform\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002Frandom-videochat-match\u002F\" rel=\"nofollow ugc\">Random Matchmaking Videochat – Speed Video Dating with Match Criteria & Monetization\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Hosting Requirements\u003C\u002Fh4>\n\u003Cp>This plugin has requirements beyond regular WordPress hosting specifications: specific live streaming servers, certificates, licensing, tools and configuration for HTML5 live camera streaming.\u003C\u002Fp>\n\u003Cp>This implementation supports 2 options for WebRTC live streaming servers:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>P2P via \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fvideowhisper\u002Fvideowhisper-webrtc\" title=\"VideoWhisper WebRTC signaling server on GitHub\" rel=\"nofollow ugc\">VideoWhisper WebRTC\u003C\u002Fa> with STUN\u002FTURN – recommend for optimal latency\u003C\u002Fli>\n\u003Cli>Relayed streaming via \u003Ca href=\"https:\u002F\u002Fvideowhisper.com\u002F?p=Requirements\" title=\"HTML5 Live Streaming Requirements\" rel=\"nofollow ugc\">Wowza SE live streaming\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Get a Free “Developers” account to test P2P WebRTC with STUN\u002FTURN included, from \u003Ca href=\"https:\u002F\u002Fwebrtchost.com\u002Fhosting-plans\u002F#WebRTC-Only\" title=\"WebRTC Host \u002F P2P WebRTC with STUN\u002FTURN\" rel=\"nofollow ugc\">WebRTC Host\u003C\u002Fa>. Limited resources available.\u003C\u002Fp>\n\u003Ch3>Effects\u003C\u002Fh3>\n\u003Cp>On PC, add effects to videochat with \u003Ca href=\"https:\u002F\u002Fsnapcamera.snapchat.com\" title=\"SnapCamera Effects\" rel=\"nofollow ugc\">SnapCamera\u003C\u002Fa> from SnapChat.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Application Homepage: \u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002Fhtml5-videochat\u002F\" title=\"100% Web Based HTML5 Videochat\" rel=\"nofollow ugc\">VideoWhisper HTML5 Videochat\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Demo\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Videochat website including mobile app:\u003Cbr \u002F>\nhttp:\u002F\u002F2wayvideochat.com\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Extra\u003C\u002Fh3>\n\u003Cp>More information, the latest updates, other plugins and non-WordPress editions can be found at https:\u002F\u002Fvideowhisper.com\u002F .\u003C\u002Fp>\n","Easily set up video call rooms or random video chat from WordPress. 100% HTML5, no downloads required. Just share the room link for instant connection …",22789,3,"2025-06-01T18:18:00.000Z",[190,191,192,22,7],"chatroulette","random","videocall","https:\u002F\u002Fvideowhisper.com\u002F?p=WordPress-Webcam-2Way-VideoChat","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebcam-2way-videochat.zip","2021-08-13 00:00:00",{"attackSurface":197,"codeSignals":545,"taintFlows":1079,"riskAssessment":1651,"analyzedAt":1670},{"hooks":198,"ajaxHandlers":373,"restRoutes":427,"shortcodes":428,"cronEvents":540,"entryPointCount":543,"unprotectedCount":544},[199,205,211,214,217,220,223,227,231,234,237,240,243,247,250,253,256,260,263,267,270,273,277,281,284,286,289,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,354,357,360,363,366,369],{"type":200,"name":201,"callback":202,"file":203,"line":204},"action","admin_notices","requirements_admin_notices","inc\\requirements.php",156,{"type":206,"name":207,"callback":208,"priority":47,"file":209,"line":210},"filter","the_content","wpautop","ppv-live-webcams.php",55,{"type":206,"name":207,"callback":212,"priority":170,"file":209,"line":213},"shortcode_unautop",58,{"type":200,"name":215,"callback":215,"file":209,"line":216},"restrict_manage_users",62,{"type":206,"name":218,"callback":218,"file":209,"line":219},"pre_get_users",63,{"type":200,"name":221,"callback":221,"file":209,"line":222},"user_edit_form_tag",65,{"type":200,"name":224,"callback":225,"file":209,"line":226},"bp_template_title","bp_connect_title",234,{"type":200,"name":228,"callback":229,"file":209,"line":230},"bp_template_content","bp_connect_content",235,{"type":200,"name":224,"callback":232,"file":209,"line":233},"bp_rooms_title",242,{"type":200,"name":228,"callback":235,"file":209,"line":236},"bp_rooms_content",243,{"type":200,"name":224,"callback":238,"file":209,"line":239},"bp_questions_title",251,{"type":200,"name":228,"callback":241,"file":209,"line":242},"bp_questions_content",252,{"type":206,"name":244,"callback":244,"priority":245,"file":209,"line":246},"wp_nav_menu_items",10,432,{"type":206,"name":248,"callback":248,"file":209,"line":249},"register_url",439,{"type":206,"name":251,"callback":251,"priority":245,"file":209,"line":252},"login_url",440,{"type":206,"name":254,"callback":254,"file":209,"line":255},"bp_user_can_create_groups",445,{"type":200,"name":257,"callback":258,"file":209,"line":259},"show_user_profile","user_profile_fields",448,{"type":200,"name":261,"callback":258,"file":209,"line":262},"edit_user_profile",449,{"type":200,"name":264,"callback":265,"file":209,"line":266},"personal_options_update","save_user_profile_fields",450,{"type":200,"name":268,"callback":265,"file":209,"line":269},"edit_user_profile_update",451,{"type":200,"name":271,"callback":271,"priority":47,"file":209,"line":272},"bp_pre_user_query_construct",455,{"type":206,"name":274,"callback":275,"priority":47,"file":209,"line":276},"woo_wallet_disallow_negative_transaction","__return_false",460,{"type":206,"name":278,"callback":279,"file":209,"line":280},"woo_wallet_payment_is_available","__return_true",461,{"type":200,"name":282,"callback":282,"file":209,"line":283},"bp_setup_nav",464,{"type":206,"name":207,"callback":207,"file":209,"line":285},471,{"type":206,"name":287,"callback":287,"file":209,"line":288},"pre_get_posts",472,{"type":206,"name":290,"callback":291,"file":209,"line":292},"request","duration_column_orderby",478,{"type":200,"name":294,"callback":294,"file":209,"line":295},"wp_head",480,{"type":200,"name":297,"callback":297,"priority":245,"file":209,"line":298},"quick_edit_custom_box",482,{"type":200,"name":300,"callback":300,"file":209,"line":301},"save_post",483,{"type":200,"name":303,"callback":303,"file":209,"line":304},"add_meta_boxes",486,{"type":200,"name":306,"callback":306,"file":209,"line":307},"vwlw_hourly",489,{"type":206,"name":309,"callback":309,"file":209,"line":310},"manage_users_columns",497,{"type":200,"name":312,"callback":312,"priority":245,"file":209,"line":313},"manage_users_custom_column",498,{"type":206,"name":315,"callback":315,"file":209,"line":316},"manage_users_sortable_columns",499,{"type":200,"name":318,"callback":318,"file":209,"line":319},"pre_user_query",500,{"type":200,"name":321,"callback":321,"priority":245,"file":209,"line":322},"after_setup_theme",502,{"type":206,"name":324,"callback":324,"file":209,"line":325},"bp_get_signup_slug",569,{"type":200,"name":327,"callback":327,"file":209,"line":328},"init",6837,{"type":200,"name":330,"callback":330,"file":209,"line":331},"plugins_loaded",6839,{"type":200,"name":333,"callback":333,"file":209,"line":334},"admin_menu",6842,{"type":200,"name":336,"callback":336,"priority":128,"file":209,"line":337},"admin_bar_menu",6843,{"type":200,"name":339,"callback":339,"file":209,"line":340},"admin_head",6845,{"type":200,"name":342,"callback":342,"file":209,"line":343},"register_form",6848,{"type":200,"name":345,"callback":345,"file":209,"line":346},"user_register",6849,{"type":206,"name":348,"callback":348,"priority":245,"file":209,"line":349},"wp_authenticate_user",6851,{"type":200,"name":351,"callback":352,"file":209,"line":353},"login_enqueue_scripts","login_logo",6854,{"type":206,"name":355,"callback":355,"priority":245,"file":209,"line":356},"login_redirect",6857,{"type":206,"name":358,"callback":358,"priority":245,"file":209,"line":359},"the_title",6859,{"type":206,"name":361,"callback":361,"file":209,"line":362},"query_vars",6860,{"type":206,"name":364,"callback":364,"file":209,"line":365},"single_template",6867,{"type":206,"name":367,"callback":364,"file":209,"line":368},"page_template",6868,{"type":200,"name":370,"callback":371,"file":209,"line":372},"bp_init","liveWebcamsBP_init",6878,[374,378,381,384,387,389,392,394,397,399,402,404,408,410,414,416,420,422,425],{"action":375,"nopriv":376,"callback":375,"hasNonce":376,"hasCapCheck":376,"file":203,"line":377},"vws_notice",false,157,{"action":379,"nopriv":376,"callback":379,"hasNonce":376,"hasCapCheck":376,"file":209,"line":380},"vmls_location",573,{"action":379,"nopriv":382,"callback":379,"hasNonce":376,"hasCapCheck":376,"file":209,"line":383},true,574,{"action":385,"nopriv":376,"callback":385,"hasNonce":376,"hasCapCheck":376,"file":209,"line":386},"vmls_notify",576,{"action":385,"nopriv":382,"callback":385,"hasNonce":376,"hasCapCheck":376,"file":209,"line":388},577,{"action":390,"nopriv":376,"callback":390,"hasNonce":376,"hasCapCheck":376,"file":209,"line":391},"vmls_stream",579,{"action":390,"nopriv":382,"callback":390,"hasNonce":376,"hasCapCheck":376,"file":209,"line":393},580,{"action":395,"nopriv":376,"callback":395,"hasNonce":376,"hasCapCheck":376,"file":209,"line":396},"vmls_recordsform",582,{"action":395,"nopriv":382,"callback":395,"hasNonce":376,"hasCapCheck":376,"file":209,"line":398},583,{"action":400,"nopriv":376,"callback":400,"hasNonce":376,"hasCapCheck":376,"file":209,"line":401},"vmls_app",585,{"action":400,"nopriv":382,"callback":400,"hasNonce":376,"hasCapCheck":376,"file":209,"line":403},586,{"action":405,"nopriv":376,"callback":406,"hasNonce":376,"hasCapCheck":376,"file":209,"line":407},"vmls","vmls_callback",588,{"action":405,"nopriv":382,"callback":406,"hasNonce":376,"hasCapCheck":376,"file":209,"line":409},589,{"action":411,"nopriv":376,"callback":412,"hasNonce":376,"hasCapCheck":376,"file":209,"line":413},"vmls_cams","vmls_cams_callback",591,{"action":411,"nopriv":382,"callback":412,"hasNonce":376,"hasCapCheck":376,"file":209,"line":415},592,{"action":417,"nopriv":376,"callback":418,"hasNonce":376,"hasCapCheck":376,"file":209,"line":419},"vmls_htmlchat","vmls_htmlchat_callback",594,{"action":417,"nopriv":382,"callback":418,"hasNonce":376,"hasCapCheck":376,"file":209,"line":421},595,{"action":423,"nopriv":376,"callback":423,"hasNonce":376,"hasCapCheck":376,"file":209,"line":424},"vmls_playlist",597,{"action":423,"nopriv":382,"callback":423,"hasNonce":376,"hasCapCheck":376,"file":209,"line":426},598,[],[429,432,435,438,441,444,447,450,453,456,459,462,465,468,471,474,477,480,483,486,489,492,495,498,501,504,507,510,513,516,519,522,525,528,531,534,537],{"tag":430,"callback":430,"file":209,"line":431},"videowhisper_sms_number",505,{"tag":433,"callback":433,"file":209,"line":434},"videowhisper_room_rate",507,{"tag":436,"callback":436,"file":209,"line":437},"videowhisper_reports",509,{"tag":439,"callback":439,"file":209,"line":440},"videowhisper_role_change",511,{"tag":442,"callback":442,"file":209,"line":443},"videowhisper_callnow",513,{"tag":445,"callback":445,"file":209,"line":446},"videowhisper_streams",515,{"tag":448,"callback":448,"file":209,"line":449},"videowhisper_login_form",517,{"tag":451,"callback":451,"file":209,"line":452},"videowhisper_register_form",518,{"tag":454,"callback":454,"file":209,"line":455},"videowhisper_register_activate",519,{"tag":457,"callback":457,"file":209,"line":458},"videowhisper_password_form",520,{"tag":460,"callback":460,"file":209,"line":461},"videowhisper_cam_message",522,{"tag":463,"callback":463,"file":209,"line":464},"videowhisper_cam_messages",523,{"tag":466,"callback":466,"file":209,"line":467},"videowhisper_cam_messages_performer",524,{"tag":469,"callback":469,"file":209,"line":470},"videowhisper_cam_calls",527,{"tag":472,"callback":472,"file":209,"line":473},"videowhisper_cam_instant",529,{"tag":475,"callback":475,"file":209,"line":476},"videowhisper_cam_random",530,{"tag":478,"callback":478,"file":209,"line":479},"videowhisper_match",531,{"tag":481,"callback":481,"file":209,"line":482},"videowhisper_match_form",532,{"tag":484,"callback":484,"file":209,"line":485},"videowhisper_cam_app",534,{"tag":487,"callback":487,"file":209,"line":488},"videowhisper_webcams",536,{"tag":490,"callback":490,"file":209,"line":491},"videowhisper_webcams_performer",537,{"tag":493,"callback":493,"file":209,"line":494},"videowhisper_webcams_studio",538,{"tag":496,"callback":496,"file":209,"line":497},"videowhisper_webcams_client",539,{"tag":499,"callback":499,"file":209,"line":500},"videowhisper_account_records",541,{"tag":502,"callback":502,"file":209,"line":503},"videowhisper_webcams_logout",543,{"tag":505,"callback":505,"file":209,"line":506},"videowhisper_follow",545,{"tag":508,"callback":508,"file":209,"line":509},"videowhisper_follow_list",546,{"tag":511,"callback":511,"file":209,"line":512},"videowhisper_videochat",548,{"tag":514,"callback":514,"file":209,"line":515},"videowhisper_camvideo",550,{"tag":517,"callback":517,"file":209,"line":518},"videowhisper_campreview",551,{"tag":520,"callback":520,"file":209,"line":521},"videowhisper_caminfo",552,{"tag":523,"callback":523,"file":209,"line":524},"videowhisper_camprofile",554,{"tag":526,"callback":526,"file":209,"line":527},"videowhisper_camhls",557,{"tag":529,"callback":529,"file":209,"line":530},"videowhisper_cammpeg",558,{"tag":532,"callback":532,"file":209,"line":533},"videowhisper_htmlchat",560,{"tag":535,"callback":535,"file":209,"line":536},"videowhisper_cam_webrtc_broadcast",562,{"tag":538,"callback":538,"file":209,"line":539},"videowhisper_cam_webrtc_playback",563,[541],{"hook":306,"callback":306,"file":209,"line":542},151,56,19,{"dangerousFunctions":546,"sqlUsage":746,"outputEscaping":751,"fileOperations":1075,"externalRequests":47,"nonceChecks":1076,"capabilityChecks":1077,"bundledLibraries":1078},[547,552,555,558,561,563,565,568,571,574,577,580,582,584,586,588,590,593,596,598,600,602,605,608,611,613,617,620,623,626,629,633,636,638,640,642,644,646,648,650,653,656,658,660,663,666,669,671,675,678,681,683,685,687,689,690,692,694,696,698,700,702,704,707,709,711,713,715,718,721,724,726,728,730,733,736,738,741,744],{"fn":548,"file":549,"line":550,"context":551},"unserialize","inc\\h5videochat.php",338,"$userMeta = unserialize($session->meta, array( 'allowed_classes' => false ));",{"fn":548,"file":549,"line":553,"context":554},351,"$userMeta = unserialize($performerSession->meta, array( 'allowed_classes' => false ));",{"fn":548,"file":549,"line":556,"context":557},376,"$meta = unserialize($privateSession->meta, array( 'allowed_classes' => false ));",{"fn":548,"file":549,"line":559,"context":560},516,"$pSessionMeta = unserialize( $pSession->meta, array( 'allowed_classes' => false ) );",{"fn":548,"file":549,"line":413,"context":562},"$sessionMeta = unserialize( $session->meta, array( 'allowed_classes' => false ) );",{"fn":548,"file":549,"line":564,"context":560},2239,{"fn":548,"file":549,"line":566,"context":567},2780,"if ( ! is_array( $roomMeta = unserialize( $session->roptions, array( 'allowed_classes' => false ) ) ",{"fn":548,"file":549,"line":569,"context":570},2859,"$userMeta = unserialize( $session->meta, array( 'allowed_classes' => false ) );",{"fn":548,"file":549,"line":572,"context":573},3592,"$meta = unserialize( $message->meta, array( 'allowed_classes' => false ) );",{"fn":548,"file":549,"line":575,"context":576},3640,"$userMeta = unserialize( $sqlRow->meta, array( 'allowed_classes' => false ) );",{"fn":548,"file":549,"line":578,"context":579},3646,"$roomMeta = unserialize( $sqlRow->roptions, array( 'allowed_classes' => false ) );",{"fn":548,"file":549,"line":581,"context":551},3774,{"fn":548,"file":549,"line":583,"context":570},3955,{"fn":548,"file":549,"line":585,"context":570},4201,{"fn":548,"file":549,"line":587,"context":570},5319,{"fn":548,"file":549,"line":589,"context":570},5364,{"fn":548,"file":549,"line":591,"context":592},5421,"if ( $session->meta ) $userMeta = unserialize( $session->meta, array( 'allowed_classes' => false ) )",{"fn":548,"file":549,"line":594,"context":595},5428,"if ($otherSession->meta) $otherUserMeta = unserialize($otherSession->meta, array( 'allowed_classes' ",{"fn":548,"file":549,"line":597,"context":570},5498,{"fn":548,"file":549,"line":599,"context":570},5565,{"fn":548,"file":549,"line":601,"context":570},5711,{"fn":548,"file":549,"line":603,"context":604},6125,"$roomOptions = unserialize( $session->roptions, array( 'allowed_classes' => false ) );",{"fn":548,"file":549,"line":606,"context":607},6666,"$meta = unserialize( $sqlRow->meta, array( 'allowed_classes' => false ) );",{"fn":548,"file":549,"line":609,"context":610},6735,"$item['meta'] = unserialize( $sqlRow->meta, array( 'allowed_classes' => false ) );",{"fn":548,"file":549,"line":612,"context":570},6799,{"fn":548,"file":614,"line":615,"context":616},"inc\\options.php",334,"'goalsDefault'                    => unserialize( 'a:5:{i:1;a:6:{s:4:\"name\";s:13:\"Break the Ice\";s:1",{"fn":548,"file":614,"line":618,"context":619},615,"'appRoles'                        => unserialize( 'a:3:{s:27:\"conferenceParticipantCamera\";a:3:{s:5:",{"fn":548,"file":614,"line":621,"context":622},634,"'appSetup'                        => unserialize( 'a:3:{s:6:\"Config\";a:23:{s:8:\"darkMode\";s:0:\"\";s:7",{"fn":548,"file":614,"line":624,"context":625},775,"'groupModes'                      => unserialize( 'a:9:{s:14:\"Free Broadcast\";a:19:{s:11:\"descriptio",{"fn":548,"file":614,"line":627,"context":628},936,"'recordFields'                    => unserialize( 'a:11:{s:9:\"Full Name\";a:2:{s:4:\"type\";s:4:\"text\";",{"fn":630,"file":614,"line":631,"context":632},"exec",3877,"if ( exec( 'echo EXEC' ) == 'EXEC' )",{"fn":630,"file":614,"line":634,"context":635},3909,"exec( escapeshellcmd( $cmd ), $output, $returnvalue );",{"fn":630,"file":614,"line":637,"context":635},3921,{"fn":630,"file":614,"line":639,"context":635},3934,{"fn":630,"file":614,"line":641,"context":635},3951,{"fn":630,"file":614,"line":643,"context":635},4014,{"fn":630,"file":614,"line":645,"context":635},4041,{"fn":630,"file":614,"line":647,"context":632},5234,{"fn":630,"file":614,"line":649,"context":635},5256,{"fn":630,"file":614,"line":651,"context":652},5296,"$process = exec( escapeshellcmd( $cmd ), $output, $returnvalue );",{"fn":630,"file":614,"line":654,"context":655},5324,"exec( $kcmd, $koutput, $kreturnvalue );",{"fn":630,"file":614,"line":657,"context":635},5372,{"fn":630,"file":614,"line":659,"context":635},5389,{"fn":548,"file":614,"line":661,"context":662},5671,"update_option( 'VWdeepLlangs', unserialize( 'a:31:{s:2:\"bg\";s:9:\"Bulgarian\";s:2:\"cs\";s:5:\"Czech\";s:2",{"fn":548,"file":664,"line":665,"context":570},"inc\\streams.php",138,{"fn":630,"file":664,"line":667,"context":668},456,"if ( $options['enable_exec'] ) exec( $cmd, $output, $returnvalue );",{"fn":630,"file":664,"line":670,"context":668},479,{"fn":672,"file":664,"line":673,"context":674},"shell_exec",510,"$output = shell_exec($command);",{"fn":630,"file":664,"line":676,"context":677},657,"exec( $cmd, $output, $returnvalue );",{"fn":630,"file":664,"line":679,"context":680},670,"exec( escapeshellcmd( $kcmd ), $koutput, $kreturnvalue );",{"fn":548,"file":664,"line":682,"context":570},764,{"fn":630,"file":664,"line":684,"context":677},798,{"fn":630,"file":664,"line":686,"context":680},811,{"fn":630,"file":664,"line":688,"context":677},923,{"fn":630,"file":664,"line":627,"context":680},{"fn":630,"file":664,"line":691,"context":677},1542,{"fn":630,"file":664,"line":693,"context":677},1573,{"fn":630,"file":664,"line":695,"context":677},1617,{"fn":630,"file":664,"line":697,"context":677},1759,{"fn":630,"file":664,"line":699,"context":677},1778,{"fn":630,"file":664,"line":701,"context":635},1788,{"fn":630,"file":664,"line":703,"context":635},1845,{"fn":630,"file":664,"line":705,"context":706},1938,"$processId = exec( $cmd  . ' echo $!;', $output, $returnvalue );",{"fn":630,"file":664,"line":708,"context":677},2014,{"fn":630,"file":664,"line":710,"context":635},2050,{"fn":548,"file":209,"line":712,"context":570},1898,{"fn":548,"file":209,"line":714,"context":570},2468,{"fn":548,"file":209,"line":716,"context":717},2955,"$meta = unserialize( $chatRow->meta, array( 'allowed_classes' => false ) );",{"fn":548,"file":209,"line":719,"context":720},3070,"return unserialize( file_get_contents( $path ), array( 'allowed_classes' => false ) );",{"fn":548,"file":209,"line":722,"context":723},5022,"$roomOptions  = unserialize( $session->roptions, array( 'allowed_classes' => false ) );",{"fn":548,"file":209,"line":725,"context":562},5079,{"fn":548,"file":209,"line":727,"context":562},5147,{"fn":548,"file":209,"line":729,"context":562},5254,{"fn":548,"file":209,"line":731,"context":732},5893,"$rtpsessions = unserialize( $rtpsessiondata, array( 'allowed_classes' => false ) );",{"fn":548,"file":209,"line":734,"context":735},6081,"$users = unserialize( $userdata, array( 'allowed_classes' => false ) );",{"fn":548,"file":209,"line":737,"context":570},6142,{"fn":548,"file":209,"line":739,"context":740},6749,"echo '\u003Ctd>' . esc_html( print_r( unserialize( $session->meta, array( 'allowed_classes' => false ) ) ",{"fn":548,"file":209,"line":742,"context":743},6806,"echo '\u003Ctd>' . esc_html( print_r( unserialize( $session->roptions, array( 'allowed_classes' => false ",{"fn":548,"file":209,"line":745,"context":740},6807,{"prepared":747,"raw":47,"locations":748},326,[749],{"file":549,"line":242,"context":750},"$wpdb->get_var() with variable interpolation",{"escaped":752,"rawEcho":753,"locations":754},1671,161,[755,759,761,763,765,767,769,771,773,775,777,779,781,783,785,787,789,791,793,795,797,799,801,803,805,807,809,811,813,815,817,819,820,822,824,826,828,830,832,834,836,838,840,842,844,846,848,850,852,854,856,858,860,862,864,866,868,870,872,874,876,878,880,882,884,886,888,890,892,894,896,898,900,902,904,906,908,910,912,913,915,917,919,921,923,925,927,929,931,933,935,937,939,941,943,945,947,949,951,953,955,957,959,961,963,965,967,969,971,973,975,977,979,981,983,985,987,988,990,992,994,995,997,999,1001,1003,1005,1007,1009,1011,1013,1015,1017,1019,1021,1023,1025,1027,1029,1031,1033,1035,1037,1039,1041,1043,1045,1047,1049,1051,1053,1055,1057,1059,1061,1063,1065,1067,1070,1071,1073],{"file":756,"line":757,"context":758},"inc\\buddypress.php",87,"raw output",{"file":756,"line":760,"context":758},110,{"file":756,"line":762,"context":758},115,{"file":756,"line":764,"context":758},118,{"file":756,"line":766,"context":758},166,{"file":756,"line":768,"context":758},169,{"file":756,"line":770,"context":758},171,{"file":756,"line":772,"context":758},191,{"file":756,"line":774,"context":758},194,{"file":549,"line":776,"context":758},3498,{"file":549,"line":778,"context":758},4062,{"file":549,"line":780,"context":758},4701,{"file":549,"line":782,"context":758},5490,{"file":549,"line":784,"context":758},7006,{"file":614,"line":786,"context":758},2083,{"file":614,"line":788,"context":758},2132,{"file":614,"line":790,"context":758},2240,{"file":614,"line":792,"context":758},2241,{"file":614,"line":794,"context":758},2245,{"file":614,"line":796,"context":758},2314,{"file":614,"line":798,"context":758},2396,{"file":614,"line":800,"context":758},2590,{"file":614,"line":802,"context":758},2653,{"file":614,"line":804,"context":758},2776,{"file":614,"line":806,"context":758},2777,{"file":614,"line":808,"context":758},2931,{"file":614,"line":810,"context":758},2964,{"file":614,"line":812,"context":758},2983,{"file":614,"line":814,"context":758},2984,{"file":614,"line":816,"context":758},3001,{"file":614,"line":818,"context":758},3328,{"file":614,"line":581,"context":758},{"file":614,"line":821,"context":758},3778,{"file":614,"line":823,"context":758},3782,{"file":614,"line":825,"context":758},3783,{"file":614,"line":827,"context":758},3784,{"file":614,"line":829,"context":758},3785,{"file":614,"line":831,"context":758},3852,{"file":614,"line":833,"context":758},4067,{"file":614,"line":835,"context":758},4085,{"file":614,"line":837,"context":758},4089,{"file":614,"line":839,"context":758},4093,{"file":614,"line":841,"context":758},4094,{"file":614,"line":843,"context":758},4095,{"file":614,"line":845,"context":758},4096,{"file":614,"line":847,"context":758},4115,{"file":614,"line":849,"context":758},4250,{"file":614,"line":851,"context":758},4857,{"file":614,"line":853,"context":758},4893,{"file":614,"line":855,"context":758},4922,{"file":614,"line":857,"context":758},4950,{"file":614,"line":859,"context":758},5010,{"file":614,"line":861,"context":758},5017,{"file":614,"line":863,"context":758},5283,{"file":614,"line":865,"context":758},5577,{"file":614,"line":867,"context":758},5678,{"file":614,"line":869,"context":758},5861,{"file":614,"line":871,"context":758},5917,{"file":614,"line":873,"context":758},5978,{"file":614,"line":875,"context":758},6291,{"file":614,"line":877,"context":758},6292,{"file":614,"line":879,"context":758},6623,{"file":614,"line":881,"context":758},6873,{"file":614,"line":883,"context":758},7739,{"file":614,"line":885,"context":758},7819,{"file":614,"line":887,"context":758},7820,{"file":614,"line":889,"context":758},7835,{"file":614,"line":891,"context":758},7836,{"file":614,"line":893,"context":758},7837,{"file":614,"line":895,"context":758},7838,{"file":614,"line":897,"context":758},7842,{"file":614,"line":899,"context":758},7845,{"file":614,"line":901,"context":758},7848,{"file":614,"line":903,"context":758},7851,{"file":614,"line":905,"context":758},7854,{"file":614,"line":907,"context":758},7856,{"file":614,"line":909,"context":758},7859,{"file":614,"line":911,"context":758},7861,{"file":614,"line":911,"context":758},{"file":614,"line":914,"context":758},7862,{"file":614,"line":916,"context":758},7865,{"file":614,"line":918,"context":758},7869,{"file":614,"line":920,"context":758},7870,{"file":614,"line":922,"context":758},7874,{"file":614,"line":924,"context":758},8032,{"file":614,"line":926,"context":758},8200,{"file":614,"line":928,"context":758},8335,{"file":614,"line":930,"context":758},8347,{"file":614,"line":932,"context":758},8363,{"file":614,"line":934,"context":758},8582,{"file":614,"line":936,"context":758},8691,{"file":614,"line":938,"context":758},8972,{"file":614,"line":940,"context":758},9027,{"file":614,"line":942,"context":758},9088,{"file":614,"line":944,"context":758},9134,{"file":614,"line":946,"context":758},9136,{"file":614,"line":948,"context":758},9148,{"file":614,"line":950,"context":758},9149,{"file":614,"line":952,"context":758},9153,{"file":614,"line":954,"context":758},9154,{"file":614,"line":956,"context":758},9156,{"file":614,"line":958,"context":758},9700,{"file":614,"line":960,"context":758},9726,{"file":614,"line":962,"context":758},9727,{"file":614,"line":964,"context":758},9732,{"file":614,"line":966,"context":758},9737,{"file":614,"line":968,"context":758},9767,{"file":614,"line":970,"context":758},9802,{"file":614,"line":972,"context":758},9805,{"file":614,"line":974,"context":758},9830,{"file":614,"line":976,"context":758},10007,{"file":614,"line":978,"context":758},10010,{"file":614,"line":980,"context":758},10014,{"file":614,"line":982,"context":758},10096,{"file":614,"line":984,"context":758},10098,{"file":664,"line":986,"context":758},71,{"file":664,"line":774,"context":758},{"file":664,"line":989,"context":758},214,{"file":664,"line":991,"context":758},219,{"file":664,"line":993,"context":758},226,{"file":664,"line":230,"context":758},{"file":209,"line":996,"context":758},257,{"file":209,"line":998,"context":758},261,{"file":209,"line":1000,"context":758},265,{"file":209,"line":1002,"context":758},280,{"file":209,"line":1004,"context":758},293,{"file":209,"line":1006,"context":758},296,{"file":209,"line":1008,"context":758},300,{"file":209,"line":1010,"context":758},306,{"file":209,"line":1012,"context":758},310,{"file":209,"line":1014,"context":758},313,{"file":209,"line":1016,"context":758},314,{"file":209,"line":1018,"context":758},327,{"file":209,"line":1020,"context":758},356,{"file":209,"line":1022,"context":758},385,{"file":209,"line":1024,"context":758},387,{"file":209,"line":1026,"context":758},1319,{"file":209,"line":1028,"context":758},1400,{"file":209,"line":1030,"context":758},3005,{"file":209,"line":1032,"context":758},3326,{"file":209,"line":1034,"context":758},3379,{"file":209,"line":1036,"context":758},3450,{"file":209,"line":1038,"context":758},3480,{"file":209,"line":1040,"context":758},3563,{"file":209,"line":1042,"context":758},3626,{"file":209,"line":1044,"context":758},3649,{"file":209,"line":1046,"context":758},4236,{"file":209,"line":1048,"context":758},4278,{"file":209,"line":1050,"context":758},5801,{"file":209,"line":1052,"context":758},6458,{"file":209,"line":1054,"context":758},6466,{"file":209,"line":1056,"context":758},6489,{"file":209,"line":1058,"context":758},6514,{"file":209,"line":1060,"context":758},6572,{"file":209,"line":1062,"context":758},6573,{"file":209,"line":1064,"context":758},6733,{"file":209,"line":1066,"context":758},6788,{"file":1068,"line":1069,"context":758},"server\\translate.php",57,{"file":1068,"line":757,"context":758},{"file":1068,"line":1072,"context":758},108,{"file":1068,"line":1074,"context":758},155,114,14,7,[],[1080,1104,1115,1125,1140,1153,1166,1259,1267,1294,1309,1367,1377,1458,1491,1572,1589,1622],{"entryPoint":1081,"graph":1082,"unsanitizedCount":131,"severity":1103},"adminRecords (inc\\options.php:9070)",{"nodes":1083,"edges":1100},[1084,1089,1094,1097],{"id":1085,"type":1086,"label":1087,"file":614,"line":1088},"n0","source","$_GET (x9)",9082,{"id":1090,"type":1091,"label":1092,"file":614,"line":942,"wp_function":1093},"n1","sink","echo() [XSS]","echo",{"id":1095,"type":1086,"label":1096,"file":614,"line":1088},"n2","$_GET (x2)",{"id":1098,"type":1091,"label":1092,"file":614,"line":1099,"wp_function":1093},"n3",9206,[1101,1102],{"from":1085,"to":1090,"sanitized":376},{"from":1095,"to":1098,"sanitized":382},"medium",{"entryPoint":1105,"graph":1106,"unsanitizedCount":1114,"severity":1103},"adminRoom (inc\\options.php:9984)",{"nodes":1107,"edges":1112},[1108,1111],{"id":1085,"type":1086,"label":1109,"file":614,"line":1110},"$_GET (x6)",9988,{"id":1090,"type":1091,"label":1092,"file":614,"line":976,"wp_function":1093},[1113],{"from":1085,"to":1090,"sanitized":376},6,{"entryPoint":1116,"graph":1117,"unsanitizedCount":47,"severity":1103},"adminReports (inc\\options.php:10078)",{"nodes":1118,"edges":1123},[1119,1122],{"id":1085,"type":1086,"label":1120,"file":614,"line":1121},"$_GET",10081,{"id":1090,"type":1091,"label":1092,"file":614,"line":982,"wp_function":1093},[1124],{"from":1085,"to":1090,"sanitized":376},{"entryPoint":1126,"graph":1127,"unsanitizedCount":77,"severity":1103},"adminStudio (ppv-live-webcams.php:6430)",{"nodes":1128,"edges":1137},[1129,1132,1133,1136],{"id":1085,"type":1086,"label":1130,"file":209,"line":1131},"$_POST (x3)",6444,{"id":1090,"type":1091,"label":1092,"file":209,"line":1052,"wp_function":1093},{"id":1095,"type":1086,"label":1134,"file":209,"line":1135},"$_GET (x5)",6443,{"id":1098,"type":1091,"label":1092,"file":209,"line":1054,"wp_function":1093},[1138,1139],{"from":1085,"to":1090,"sanitized":376},{"from":1095,"to":1098,"sanitized":376},{"entryPoint":1141,"graph":1142,"unsanitizedCount":47,"severity":1103},"\u003Ctranslate> (server\\translate.php:0)",{"nodes":1143,"edges":1151},[1144,1147],{"id":1085,"type":1086,"label":1145,"file":1068,"line":1146},"$_SERVER",23,{"id":1090,"type":1091,"label":1148,"file":1068,"line":1149,"wp_function":1150},"header() [Header Injection]",35,"header",[1152],{"from":1085,"to":1090,"sanitized":376},{"entryPoint":1154,"graph":1155,"unsanitizedCount":28,"severity":1165},"videowhisper_match (inc\\h5videochat.php:19)",{"nodes":1156,"edges":1163},[1157,1160],{"id":1085,"type":1086,"label":1158,"file":549,"line":1159},"$_COOKIE (x2)",33,{"id":1090,"type":1091,"label":1161,"file":549,"line":986,"wp_function":1162},"get_row() [SQLi]","get_row",[1164],{"from":1085,"to":1090,"sanitized":382},"low",{"entryPoint":1167,"graph":1168,"unsanitizedCount":28,"severity":1165},"adminOptions (inc\\options.php:1902)",{"nodes":1169,"edges":1245},[1170,1172,1173,1175,1177,1181,1183,1187,1189,1193,1195,1199,1201,1205,1207,1211,1213,1217,1219,1223,1225,1229,1231,1235,1238,1240],{"id":1085,"type":1086,"label":1171,"file":614,"line":786},"$_SERVER['REQUEST_URI']",{"id":1090,"type":1091,"label":1092,"file":614,"line":786,"wp_function":1093},{"id":1095,"type":1086,"label":1087,"file":614,"line":1174},2480,{"id":1098,"type":1091,"label":1092,"file":614,"line":1176,"wp_function":1093},2489,{"id":1178,"type":1086,"label":1179,"file":614,"line":1180},"n4","$_SERVER['SERVER_NAME']",3837,{"id":1182,"type":1091,"label":1092,"file":614,"line":1180,"wp_function":1093},"n5",{"id":1184,"type":1086,"label":1185,"file":614,"line":1186},"n6","$_SERVER['SERVER_ADDR']",3838,{"id":1188,"type":1091,"label":1092,"file":614,"line":1186,"wp_function":1093},"n7",{"id":1190,"type":1086,"label":1191,"file":614,"line":1192},"n8","$_SERVER['SERVER_PORT']",3839,{"id":1194,"type":1091,"label":1092,"file":614,"line":1192,"wp_function":1093},"n9",{"id":1196,"type":1086,"label":1197,"file":614,"line":1198},"n10","$_SERVER['SERVER_PROTOCOL']",3840,{"id":1200,"type":1091,"label":1092,"file":614,"line":1198,"wp_function":1093},"n11",{"id":1202,"type":1086,"label":1203,"file":614,"line":1204},"n12","$_SERVER['DOCUMENT_ROOT']",3841,{"id":1206,"type":1091,"label":1092,"file":614,"line":1204,"wp_function":1093},"n13",{"id":1208,"type":1086,"label":1209,"file":614,"line":1210},"n14","$_SERVER['SERVER_SOFTWARE']",3848,{"id":1212,"type":1091,"label":1092,"file":614,"line":1210,"wp_function":1093},"n15",{"id":1214,"type":1086,"label":1215,"file":614,"line":1216},"n16","$_SERVER['HTTP_CONNECTION']",3849,{"id":1218,"type":1091,"label":1092,"file":614,"line":1216,"wp_function":1093},"n17",{"id":1220,"type":1086,"label":1221,"file":614,"line":1222},"n18","$_SERVER['REMOTE_ADDR']",3850,{"id":1224,"type":1091,"label":1092,"file":614,"line":1222,"wp_function":1093},"n19",{"id":1226,"type":1086,"label":1227,"file":614,"line":1228},"n20","$_SERVER['HTTP_USER_AGENT']",3851,{"id":1230,"type":1091,"label":1092,"file":614,"line":1228,"wp_function":1093},"n21",{"id":1232,"type":1086,"label":1233,"file":614,"line":1234},"n22","$_POST",4148,{"id":1236,"type":1091,"label":1092,"file":614,"line":1237,"wp_function":1093},"n23",4151,{"id":1239,"type":1086,"label":1233,"file":614,"line":1234},"n24",{"id":1241,"type":1091,"label":1242,"file":614,"line":1243,"wp_function":1244},"n25","file_get_contents() [SSRF\u002FLFI]",4152,"file_get_contents",[1246,1247,1248,1249,1250,1251,1252,1253,1254,1255,1256,1257,1258],{"from":1085,"to":1090,"sanitized":382},{"from":1095,"to":1098,"sanitized":382},{"from":1178,"to":1182,"sanitized":382},{"from":1184,"to":1188,"sanitized":382},{"from":1190,"to":1194,"sanitized":382},{"from":1196,"to":1200,"sanitized":382},{"from":1202,"to":1206,"sanitized":382},{"from":1208,"to":1212,"sanitized":382},{"from":1214,"to":1218,"sanitized":382},{"from":1220,"to":1224,"sanitized":382},{"from":1226,"to":1230,"sanitized":382},{"from":1232,"to":1236,"sanitized":382},{"from":1239,"to":1241,"sanitized":382},{"entryPoint":1260,"graph":1261,"unsanitizedCount":28,"severity":1165},"adminAPF (inc\\options.php:7643)",{"nodes":1262,"edges":1265},[1263,1264],{"id":1085,"type":1086,"label":1171,"file":614,"line":883},{"id":1090,"type":1091,"label":1092,"file":614,"line":883,"wp_function":1093},[1266],{"from":1085,"to":1090,"sanitized":382},{"entryPoint":1268,"graph":1269,"unsanitizedCount":28,"severity":1165},"adminPayoutReport (inc\\options.php:8295)",{"nodes":1270,"edges":1289},[1271,1273,1274,1276,1278,1280,1284,1285],{"id":1085,"type":1086,"label":1130,"file":614,"line":1272},8320,{"id":1090,"type":1091,"label":1092,"file":614,"line":932,"wp_function":1093},{"id":1095,"type":1086,"label":1120,"file":614,"line":1275},8424,{"id":1098,"type":1091,"label":1092,"file":614,"line":1277,"wp_function":1093},8425,{"id":1178,"type":1086,"label":1233,"file":614,"line":1279},8319,{"id":1182,"type":1091,"label":1281,"file":614,"line":1282,"wp_function":1283},"get_var() [SQLi]",8527,"get_var",{"id":1184,"type":1086,"label":1233,"file":614,"line":1272},{"id":1188,"type":1091,"label":1286,"file":614,"line":1287,"wp_function":1288},"file_put_contents() [File Write]",8565,"file_put_contents",[1290,1291,1292,1293],{"from":1085,"to":1090,"sanitized":382},{"from":1095,"to":1098,"sanitized":382},{"from":1178,"to":1182,"sanitized":382},{"from":1184,"to":1188,"sanitized":382},{"entryPoint":1295,"graph":1296,"unsanitizedCount":28,"severity":1165},"adminPayouts (inc\\options.php:8601)",{"nodes":1297,"edges":1306},[1298,1300,1302,1304],{"id":1085,"type":1086,"label":1130,"file":614,"line":1299},8645,{"id":1090,"type":1091,"label":1092,"file":614,"line":1301,"wp_function":1093},8965,{"id":1095,"type":1086,"label":1233,"file":614,"line":1303},8636,{"id":1098,"type":1091,"label":1286,"file":614,"line":1305,"wp_function":1288},9007,[1307,1308],{"from":1085,"to":1090,"sanitized":382},{"from":1095,"to":1098,"sanitized":382},{"entryPoint":1310,"graph":1311,"unsanitizedCount":28,"severity":1165},"\u003Coptions> (inc\\options.php:0)",{"nodes":1312,"edges":1351},[1313,1315,1316,1318,1319,1320,1321,1322,1323,1324,1325,1326,1327,1328,1329,1330,1331,1332,1333,1334,1335,1336,1337,1339,1340,1341,1342,1344,1346,1349],{"id":1085,"type":1086,"label":1314,"file":614,"line":786},"$_SERVER['REQUEST_URI'] (x2)",{"id":1090,"type":1091,"label":1092,"file":614,"line":786,"wp_function":1093},{"id":1095,"type":1086,"label":1317,"file":614,"line":1174},"$_GET (x38)",{"id":1098,"type":1091,"label":1092,"file":614,"line":1176,"wp_function":1093},{"id":1178,"type":1086,"label":1179,"file":614,"line":1180},{"id":1182,"type":1091,"label":1092,"file":614,"line":1180,"wp_function":1093},{"id":1184,"type":1086,"label":1185,"file":614,"line":1186},{"id":1188,"type":1091,"label":1092,"file":614,"line":1186,"wp_function":1093},{"id":1190,"type":1086,"label":1191,"file":614,"line":1192},{"id":1194,"type":1091,"label":1092,"file":614,"line":1192,"wp_function":1093},{"id":1196,"type":1086,"label":1197,"file":614,"line":1198},{"id":1200,"type":1091,"label":1092,"file":614,"line":1198,"wp_function":1093},{"id":1202,"type":1086,"label":1203,"file":614,"line":1204},{"id":1206,"type":1091,"label":1092,"file":614,"line":1204,"wp_function":1093},{"id":1208,"type":1086,"label":1209,"file":614,"line":1210},{"id":1212,"type":1091,"label":1092,"file":614,"line":1210,"wp_function":1093},{"id":1214,"type":1086,"label":1215,"file":614,"line":1216},{"id":1218,"type":1091,"label":1092,"file":614,"line":1216,"wp_function":1093},{"id":1220,"type":1086,"label":1221,"file":614,"line":1222},{"id":1224,"type":1091,"label":1092,"file":614,"line":1222,"wp_function":1093},{"id":1226,"type":1086,"label":1227,"file":614,"line":1228},{"id":1230,"type":1091,"label":1092,"file":614,"line":1228,"wp_function":1093},{"id":1232,"type":1086,"label":1338,"file":614,"line":1234},"$_POST (x8)",{"id":1236,"type":1091,"label":1092,"file":614,"line":1237,"wp_function":1093},{"id":1239,"type":1086,"label":1233,"file":614,"line":1234},{"id":1241,"type":1091,"label":1242,"file":614,"line":1243,"wp_function":1244},{"id":1343,"type":1086,"label":1233,"file":614,"line":1279},"n26",{"id":1345,"type":1091,"label":1281,"file":614,"line":1282,"wp_function":1283},"n27",{"id":1347,"type":1086,"label":1348,"file":614,"line":1272},"n28","$_POST (x2)",{"id":1350,"type":1091,"label":1286,"file":614,"line":1287,"wp_function":1288},"n29",[1352,1353,1354,1355,1356,1357,1358,1359,1360,1361,1362,1363,1364,1365,1366],{"from":1085,"to":1090,"sanitized":382},{"from":1095,"to":1098,"sanitized":382},{"from":1178,"to":1182,"sanitized":382},{"from":1184,"to":1188,"sanitized":382},{"from":1190,"to":1194,"sanitized":382},{"from":1196,"to":1200,"sanitized":382},{"from":1202,"to":1206,"sanitized":382},{"from":1208,"to":1212,"sanitized":382},{"from":1214,"to":1218,"sanitized":382},{"from":1220,"to":1224,"sanitized":382},{"from":1226,"to":1230,"sanitized":382},{"from":1232,"to":1236,"sanitized":382},{"from":1239,"to":1241,"sanitized":382},{"from":1343,"to":1345,"sanitized":382},{"from":1347,"to":1350,"sanitized":382},{"entryPoint":1368,"graph":1369,"unsanitizedCount":28,"severity":1165},"adminSessions (ppv-live-webcams.php:6684)",{"nodes":1370,"edges":1375},[1371,1373],{"id":1085,"type":1086,"label":1120,"file":209,"line":1372},6686,{"id":1090,"type":1091,"label":1092,"file":209,"line":1374,"wp_function":1093},6694,[1376],{"from":1085,"to":1090,"sanitized":382},{"entryPoint":1378,"graph":1379,"unsanitizedCount":28,"severity":1165},"\u003Cppv-live-webcams> (ppv-live-webcams.php:0)",{"nodes":1380,"edges":1442},[1381,1383,1385,1388,1392,1393,1397,1399,1400,1401,1403,1405,1407,1408,1410,1411,1415,1417,1419,1421,1423,1424,1426,1429,1430,1433,1435,1438,1439,1441],{"id":1085,"type":1086,"label":1134,"file":209,"line":1382},2595,{"id":1090,"type":1091,"label":1281,"file":209,"line":1384,"wp_function":1283},2596,{"id":1095,"type":1086,"label":1386,"file":209,"line":1387},"$_COOKIE (x3)",2624,{"id":1098,"type":1091,"label":1389,"file":209,"line":1390,"wp_function":1391},"query() [SQLi]",2695,"query",{"id":1178,"type":1086,"label":1109,"file":209,"line":1382},{"id":1182,"type":1091,"label":1394,"file":209,"line":1395,"wp_function":1396},"get_results() [SQLi]",2888,"get_results",{"id":1184,"type":1086,"label":1398,"file":209,"line":1382},"$_GET (x11)",{"id":1188,"type":1091,"label":1389,"file":209,"line":808,"wp_function":1391},{"id":1190,"type":1086,"label":1134,"file":209,"line":1382},{"id":1194,"type":1091,"label":1161,"file":209,"line":1402,"wp_function":1162},4785,{"id":1196,"type":1086,"label":1120,"file":209,"line":1404},112,{"id":1200,"type":1091,"label":1242,"file":209,"line":1406,"wp_function":1244},5559,{"id":1202,"type":1086,"label":1120,"file":209,"line":1404},{"id":1206,"type":1091,"label":1286,"file":209,"line":1409,"wp_function":1288},5569,{"id":1208,"type":1086,"label":1096,"file":209,"line":1404},{"id":1212,"type":1091,"label":1412,"file":209,"line":1413,"wp_function":1414},"fopen() [File Access]",5665,"fopen",{"id":1214,"type":1086,"label":1416,"file":209,"line":1404},"$_GET (x29)",{"id":1218,"type":1091,"label":1092,"file":209,"line":1418,"wp_function":1093},5704,{"id":1220,"type":1086,"label":1130,"file":209,"line":1420},5890,{"id":1224,"type":1091,"label":1286,"file":209,"line":1422,"wp_function":1288},5891,{"id":1226,"type":1086,"label":1348,"file":209,"line":1420},{"id":1230,"type":1091,"label":1425,"file":209,"line":731,"wp_function":548},"unserialize() [Object Injection]",{"id":1232,"type":1086,"label":1427,"file":209,"line":1428},"$_GET (x4)",3251,{"id":1236,"type":1091,"label":1425,"file":209,"line":737,"wp_function":548},{"id":1239,"type":1086,"label":1431,"file":209,"line":1432},"$_POST (x4)",6078,{"id":1241,"type":1091,"label":1092,"file":209,"line":1434,"wp_function":1093},6258,{"id":1343,"type":1086,"label":1436,"file":209,"line":1437},"$_GET['task']",6266,{"id":1345,"type":1091,"label":1092,"file":209,"line":1437,"wp_function":1093},{"id":1347,"type":1086,"label":1145,"file":209,"line":1440},6322,{"id":1350,"type":1091,"label":1092,"file":209,"line":1060,"wp_function":1093},[1443,1444,1445,1446,1447,1448,1449,1450,1451,1452,1453,1454,1455,1456,1457],{"from":1085,"to":1090,"sanitized":382},{"from":1095,"to":1098,"sanitized":382},{"from":1178,"to":1182,"sanitized":382},{"from":1184,"to":1188,"sanitized":382},{"from":1190,"to":1194,"sanitized":382},{"from":1196,"to":1200,"sanitized":382},{"from":1202,"to":1206,"sanitized":382},{"from":1208,"to":1212,"sanitized":382},{"from":1214,"to":1218,"sanitized":382},{"from":1220,"to":1224,"sanitized":382},{"from":1226,"to":1230,"sanitized":382},{"from":1232,"to":1236,"sanitized":382},{"from":1239,"to":1241,"sanitized":382},{"from":1343,"to":1345,"sanitized":382},{"from":1347,"to":1350,"sanitized":382},{"entryPoint":1459,"graph":1460,"unsanitizedCount":1490,"severity":40},"vmls_app (inc\\h5videochat.php:3789)",{"nodes":1461,"edges":1483},[1462,1465,1467,1469,1470,1472,1474,1475,1477,1478,1480,1481],{"id":1085,"type":1086,"label":1463,"file":549,"line":1464},"$_POST (x17)",3832,{"id":1090,"type":1091,"label":1161,"file":549,"line":1466,"wp_function":1162},3900,{"id":1095,"type":1086,"label":1468,"file":549,"line":1464},"$_POST (x11)",{"id":1098,"type":1091,"label":1425,"file":549,"line":583,"wp_function":548},{"id":1178,"type":1086,"label":1471,"file":549,"line":1464},"$_POST (x33)",{"id":1182,"type":1091,"label":1389,"file":549,"line":1473,"wp_function":1391},4009,{"id":1184,"type":1086,"label":1130,"file":549,"line":1464},{"id":1188,"type":1091,"label":1281,"file":549,"line":1476,"wp_function":1283},4124,{"id":1190,"type":1086,"label":1348,"file":549,"line":1464},{"id":1194,"type":1091,"label":1286,"file":549,"line":1479,"wp_function":1288},5636,{"id":1196,"type":1086,"label":1348,"file":549,"line":1464},{"id":1200,"type":1091,"label":1394,"file":549,"line":1482,"wp_function":1396},6628,[1484,1485,1486,1487,1488,1489],{"from":1085,"to":1090,"sanitized":382},{"from":1095,"to":1098,"sanitized":376},{"from":1178,"to":1182,"sanitized":382},{"from":1184,"to":1188,"sanitized":382},{"from":1190,"to":1194,"sanitized":376},{"from":1196,"to":1200,"sanitized":382},13,{"entryPoint":1492,"graph":1493,"unsanitizedCount":1571,"severity":40},"\u003Ch5videochat> (inc\\h5videochat.php:0)",{"nodes":1494,"edges":1552},[1495,1497,1498,1500,1501,1502,1504,1505,1507,1509,1511,1513,1515,1516,1518,1519,1521,1523,1525,1526,1527,1529,1531,1532,1534,1535,1536,1537,1538,1539,1540,1542,1544,1546,1548,1550],{"id":1085,"type":1086,"label":1496,"file":549,"line":1159},"$_COOKIE (x9)",{"id":1090,"type":1091,"label":1161,"file":549,"line":986,"wp_function":1162},{"id":1095,"type":1086,"label":1499,"file":549,"line":1159},"$_COOKIE (x8)",{"id":1098,"type":1091,"label":1425,"file":549,"line":550,"wp_function":548},{"id":1178,"type":1086,"label":1499,"file":549,"line":1159},{"id":1182,"type":1091,"label":1389,"file":549,"line":1503,"wp_function":1391},348,{"id":1184,"type":1086,"label":1158,"file":549,"line":1159},{"id":1188,"type":1091,"label":1161,"file":549,"line":1506,"wp_function":1162},419,{"id":1190,"type":1086,"label":1120,"file":549,"line":1508},793,{"id":1194,"type":1091,"label":1281,"file":549,"line":1510,"wp_function":1283},851,{"id":1196,"type":1086,"label":1096,"file":549,"line":1512},925,{"id":1200,"type":1091,"label":1161,"file":549,"line":1514,"wp_function":1162},938,{"id":1202,"type":1086,"label":1120,"file":549,"line":1508},{"id":1206,"type":1091,"label":1389,"file":549,"line":1517,"wp_function":1391},1105,{"id":1208,"type":1086,"label":1158,"file":549,"line":1159},{"id":1212,"type":1091,"label":1394,"file":549,"line":1520,"wp_function":1396},1412,{"id":1214,"type":1086,"label":1522,"file":549,"line":1159},"$_COOKIE",{"id":1218,"type":1091,"label":1092,"file":549,"line":1524,"wp_function":1093},1438,{"id":1220,"type":1086,"label":1120,"file":549,"line":1508},{"id":1224,"type":1091,"label":1425,"file":549,"line":564,"wp_function":548},{"id":1226,"type":1086,"label":1522,"file":549,"line":1528},912,{"id":1230,"type":1091,"label":1281,"file":549,"line":1530,"wp_function":1283},3461,{"id":1232,"type":1086,"label":1120,"file":549,"line":1508},{"id":1236,"type":1091,"label":1394,"file":549,"line":1533,"wp_function":1396},3634,{"id":1239,"type":1086,"label":1463,"file":549,"line":1464},{"id":1241,"type":1091,"label":1161,"file":549,"line":1466,"wp_function":1162},{"id":1343,"type":1086,"label":1468,"file":549,"line":1464},{"id":1345,"type":1091,"label":1425,"file":549,"line":583,"wp_function":548},{"id":1347,"type":1086,"label":1471,"file":549,"line":1464},{"id":1350,"type":1091,"label":1389,"file":549,"line":1473,"wp_function":1391},{"id":1541,"type":1086,"label":1130,"file":549,"line":1464},"n30",{"id":1543,"type":1091,"label":1281,"file":549,"line":1476,"wp_function":1283},"n31",{"id":1545,"type":1086,"label":1348,"file":549,"line":1464},"n32",{"id":1547,"type":1091,"label":1286,"file":549,"line":1479,"wp_function":1288},"n33",{"id":1549,"type":1086,"label":1348,"file":549,"line":1464},"n34",{"id":1551,"type":1091,"label":1394,"file":549,"line":1482,"wp_function":1396},"n35",[1553,1554,1555,1556,1557,1558,1559,1560,1561,1562,1563,1564,1565,1566,1567,1568,1569,1570],{"from":1085,"to":1090,"sanitized":382},{"from":1095,"to":1098,"sanitized":376},{"from":1178,"to":1182,"sanitized":382},{"from":1184,"to":1188,"sanitized":376},{"from":1190,"to":1194,"sanitized":376},{"from":1196,"to":1200,"sanitized":382},{"from":1202,"to":1206,"sanitized":382},{"from":1208,"to":1212,"sanitized":382},{"from":1214,"to":1218,"sanitized":376},{"from":1220,"to":1224,"sanitized":376},{"from":1226,"to":1230,"sanitized":382},{"from":1232,"to":1236,"sanitized":382},{"from":1239,"to":1241,"sanitized":382},{"from":1343,"to":1345,"sanitized":376},{"from":1347,"to":1350,"sanitized":382},{"from":1541,"to":1543,"sanitized":382},{"from":1545,"to":1547,"sanitized":376},{"from":1549,"to":1551,"sanitized":382},26,{"entryPoint":1573,"graph":1574,"unsanitizedCount":47,"severity":40},"vmls_htmlchat_callback (ppv-live-webcams.php:2584)",{"nodes":1575,"edges":1584},[1576,1577,1578,1579,1580,1581,1582,1583],{"id":1085,"type":1086,"label":1120,"file":209,"line":1382},{"id":1090,"type":1091,"label":1281,"file":209,"line":1384,"wp_function":1283},{"id":1095,"type":1086,"label":1386,"file":209,"line":1387},{"id":1098,"type":1091,"label":1389,"file":209,"line":1390,"wp_function":1391},{"id":1178,"type":1086,"label":1096,"file":209,"line":1382},{"id":1182,"type":1091,"label":1394,"file":209,"line":1395,"wp_function":1396},{"id":1184,"type":1086,"label":1120,"file":209,"line":1382},{"id":1188,"type":1091,"label":1389,"file":209,"line":808,"wp_function":1391},[1585,1586,1587,1588],{"from":1085,"to":1090,"sanitized":376},{"from":1095,"to":1098,"sanitized":382},{"from":1178,"to":1182,"sanitized":382},{"from":1184,"to":1188,"sanitized":382},{"entryPoint":1590,"graph":1591,"unsanitizedCount":94,"severity":40},"vmls_callback (ppv-live-webcams.php:5673)",{"nodes":1592,"edges":1613},[1593,1595,1597,1598,1600,1601,1602,1603,1604,1605,1606,1607,1609,1610,1611,1612],{"id":1085,"type":1086,"label":1096,"file":209,"line":1594},5725,{"id":1090,"type":1091,"label":1281,"file":209,"line":1596,"wp_function":1283},5745,{"id":1095,"type":1086,"label":1096,"file":209,"line":1594},{"id":1098,"type":1091,"label":1092,"file":209,"line":1599,"wp_function":1093},5803,{"id":1178,"type":1086,"label":1130,"file":209,"line":1420},{"id":1182,"type":1091,"label":1286,"file":209,"line":1422,"wp_function":1288},{"id":1184,"type":1086,"label":1348,"file":209,"line":1420},{"id":1188,"type":1091,"label":1425,"file":209,"line":731,"wp_function":548},{"id":1190,"type":1086,"label":1120,"file":209,"line":1594},{"id":1194,"type":1091,"label":1425,"file":209,"line":737,"wp_function":548},{"id":1196,"type":1086,"label":1120,"file":209,"line":1594},{"id":1200,"type":1091,"label":1389,"file":209,"line":1608,"wp_function":1391},6153,{"id":1202,"type":1086,"label":1233,"file":209,"line":1432},{"id":1206,"type":1091,"label":1092,"file":209,"line":1434,"wp_function":1093},{"id":1208,"type":1086,"label":1436,"file":209,"line":1437},{"id":1212,"type":1091,"label":1092,"file":209,"line":1437,"wp_function":1093},[1614,1615,1616,1617,1618,1619,1620,1621],{"from":1085,"to":1090,"sanitized":376},{"from":1095,"to":1098,"sanitized":376},{"from":1178,"to":1182,"sanitized":376},{"from":1184,"to":1188,"sanitized":376},{"from":1190,"to":1194,"sanitized":376},{"from":1196,"to":1200,"sanitized":376},{"from":1202,"to":1206,"sanitized":382},{"from":1208,"to":1212,"sanitized":376},{"entryPoint":1623,"graph":1624,"unsanitizedCount":1146,"severity":69},"\u003Cstreams> (inc\\streams.php:0)",{"nodes":1625,"edges":1645},[1626,1628,1630,1632,1634,1636,1638,1639,1641,1643],{"id":1085,"type":1086,"label":1348,"file":664,"line":1627},211,{"id":1090,"type":1091,"label":1412,"file":664,"line":1629,"wp_function":1414},302,{"id":1095,"type":1086,"label":1631,"file":664,"line":1627},"$_POST (x12)",{"id":1098,"type":1091,"label":1633,"file":664,"line":684,"wp_function":630},"exec() [RCE]",{"id":1178,"type":1086,"label":1635,"file":664,"line":1627},"$_POST (x5)",{"id":1182,"type":1091,"label":1281,"file":664,"line":1637,"wp_function":1283},1174,{"id":1184,"type":1086,"label":1431,"file":664,"line":1627},{"id":1188,"type":1091,"label":1286,"file":664,"line":1640,"wp_function":1288},1601,{"id":1190,"type":1086,"label":1642,"file":664,"line":1627},"$_POST (x7)",{"id":1194,"type":1091,"label":1286,"file":664,"line":1644,"wp_function":1288},1615,[1646,1647,1648,1649,1650],{"from":1085,"to":1090,"sanitized":376},{"from":1095,"to":1098,"sanitized":376},{"from":1178,"to":1182,"sanitized":376},{"from":1184,"to":1188,"sanitized":376},{"from":1190,"to":1194,"sanitized":382},{"summary":1652,"deductions":1653},"The \"ppv-live-webcams\" plugin v7.3.24 presents a mixed security posture.  While it demonstrates strengths in SQL query handling with 100% prepared statements and a high percentage of properly escaped outputs, significant concerns arise from its attack surface.  Nineteen AJAX handlers lack authentication checks, creating a substantial entry point for unauthorized actions.  Furthermore, the taint analysis reveals a critical severity flow and four high severity flows with unsanitized paths, indicating potential for code injection or other severe compromises.\n\nThe plugin's vulnerability history, with four known CVEs including two critical and two high severity, further exacerbates these concerns. The prevalence of vulnerability types such as Improper Privilege Management, Code Injection, Authentication Bypass, and Path Traversal in past issues suggests recurring fundamental security weaknesses. Although there are no currently unpatched CVEs, the pattern of past critical vulnerabilities and the static analysis findings highlight a plugin that has historically struggled with robust security practices and may continue to be a target.\n\nIn conclusion, while the plugin has some positive security attributes, the combination of a large, unprotected attack surface, critical taint flows, and a history of severe vulnerabilities points to a high-risk plugin that requires immediate attention. The lack of robust authentication on many AJAX endpoints, coupled with potential for code injection and path traversal, makes it a significant liability.",[1654,1656,1659,1661,1663,1665,1668],{"reason":1655,"points":245},"Unprotected AJAX handlers",{"reason":1657,"points":1658},"Critical severity taint flow",15,{"reason":1660,"points":94},"High severity taint flows (4)",{"reason":1662,"points":110},"Known critical CVEs (2)",{"reason":1664,"points":94},"Known high CVEs (2)",{"reason":1666,"points":1667},"Dangerous functions used",5,{"reason":1669,"points":1667},"Flows with unsanitized paths","2026-03-16T22:31:49.934Z",{"wat":1672,"direct":1697},{"assetPaths":1673,"generatorPatterns":1684,"scriptPaths":1685,"versionParams":1686},[1674,1675,1676,1677,1678,1679,1680,1681,1682,1683],"\u002Fwp-content\u002Fplugins\u002Fppv-live-webcams\u002Fcss\u002Fchat.css","\u002Fwp-content\u002Fplugins\u002Fppv-live-webcams\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fppv-live-webcams\u002Fcss\u002Fbootstrap.min.css","\u002Fwp-content\u002Fplugins\u002Fppv-live-webcams\u002Fjs\u002Fchat.js","\u002Fwp-content\u002Fplugins\u002Fppv-live-webcams\u002Fjs\u002Fwebrtc.js","\u002Fwp-content\u002Fplugins\u002Fppv-live-webcams\u002Fjs\u002Fwebrtc-helper.js","\u002Fwp-content\u002Fplugins\u002Fppv-live-webcams\u002Fjs\u002Fchat-helper.js","\u002Fwp-content\u002Fplugins\u002Fppv-live-webcams\u002Fjs\u002Fwebrtc-call.js","\u002Fwp-content\u002Fplugins\u002Fppv-live-webcams\u002Fjs\u002Fwebrtc-room.js","\u002Fwp-content\u002Fplugins\u002Fppv-live-webcams\u002Fjs\u002Fwebrtc-room-view.js",[],[1677,1678,1679,1680,1681,1682,1683],[1687,1688,1689,1690,1691,1692,1693,1694,1695,1696],"ppv-live-webcams\u002Fcss\u002Fchat.css?ver=","ppv-live-webcams\u002Fcss\u002Fstyle.css?ver=","ppv-live-webcams\u002Fcss\u002Fbootstrap.min.css?ver=","ppv-live-webcams\u002Fjs\u002Fchat.js?ver=","ppv-live-webcams\u002Fjs\u002Fwebrtc.js?ver=","ppv-live-webcams\u002Fjs\u002Fwebrtc-helper.js?ver=","ppv-live-webcams\u002Fjs\u002Fchat-helper.js?ver=","ppv-live-webcams\u002Fjs\u002Fwebrtc-call.js?ver=","ppv-live-webcams\u002Fjs\u002Fwebrtc-room.js?ver=","ppv-live-webcams\u002Fjs\u002Fwebrtc-room-view.js?ver=",{"cssClasses":1698,"htmlComments":1705,"htmlAttributes":1706,"restEndpoints":1710,"jsGlobals":1714,"shortcodeOutput":1718},[4,1699,1700,1701,1702,1703,1704],"vw-live-webcams-chat","vw-live-webcams-room","vw-live-webcams-controls","vw-live-webcams-video","vw-live-webcams-participant","vw-live-webcams-message",[],[1707,1708,1709],"data-plugin-path=\"ppv-live-webcams\"","data-user-id","data-performer-id",[1711,1712,1713],"\u002Fwp-json\u002Fppv-live-webcams\u002Fv1\u002Fchat","\u002Fwp-json\u002Fppv-live-webcams\u002Fv1\u002Fstream","\u002Fwp-json\u002Fppv-live-webcams\u002Fv1\u002Fusers",[1715,1716,1717],"window.PPVLiveWebcams","window.VWliveWebcams","var VWliveWebcams",[1719,1720,1721],"[ppv_live_webcams_chat]","[ppv_live_webcams_room]","[ppv_live_webcams_stream]"]