[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fs-TUSyWv5ktUf8SJ0Pv2cVGTyeLRb3AtNDM5VMbFNrw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":183,"crawl_stats":38,"alternatives":189,"analysis":290,"fingerprints":1676},"videowhisper-live-streaming-integration","Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP","7.1.6","videowhisper","https:\u002F\u002Fprofiles.wordpress.org\u002Fvideowhisper\u002F","\u003Cp>\u003Cstrong>Build your own live streaming platform with WordPress.\u003C\u002Fstrong> Broadcast Live Video powers turnkey live streaming sites with multiple channel types, web-based broadcasting, chat, monetization, and full content ownership — no third-party platforms required.\u003C\u002Fp>\n\u003Cp>Broadcast from any source: \u003Cem>browser webcams via WebRTC, desktop encoders like OBS, mobile apps like Larix Broadcaster, and 24\u002F7 RTSP\u002FRTMP IP cameras\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbroadcastlivevideo.com\u002F\" rel=\"nofollow ugc\">Broadcast Live Video – Turnkey Streaming Site Solution\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>What’s New in 7.x\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>WebRTC Streaming App\u003C\u002Fstrong> — Modern React-based broadcast and playback interface (\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fvideowhisper\u002FWebcam-Streaming-WebRTC\" rel=\"nofollow ugc\">Webcam-Streaming-WebRTC\u003C\u002Fa>) with configurable stream quality, watermark overlay, and automatic view routing (broadcast for owners, playback for viewers)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Visual Schedule Editor\u003C\u002Fstrong> — Program 24\u002F7 channels with a drag-and-drop schedule builder: daily, weekly, or one-time programs with live stream, video file, and video folder sources with priority ordering and filler content\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Channel Listing Skins\u003C\u002Fstrong> — Choose from ready-made listing designs (Twitchy dark theme, Ticky vertical cards) or fully customize with template placeholders and CSS\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Improved Channel Management\u003C\u002Fstrong> — Card-based grid layout with visual status labels, collapsible menus, breadcrumb navigation, and smart interface-aware controls\u003C\u002Fli>\n\u003Cli>\u003Cstrong>VideoWhisper Server Integration\u003C\u002Fstrong> — Deep integration with \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fvideowhisper\u002Fvideowhisper-webrtc\" rel=\"nofollow ugc\">VideoWhisper WebRTC Server\u003C\u002Fa> for RTMP\u002FHLS restreaming, schedule processing, and WebRTC signaling\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enhanced Restreaming\u003C\u002Fstrong> — Frontend restream channel creation (including guest access), stream pause\u002Fresume, admin dashboard with server status, capacity monitoring, and per-stream controls\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Get Started\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Free account for testing\u003C\u002Fstrong>: \u003Ca href=\"https:\u002F\u002Fwebrtchost.com\u002Fhosting-plans\u002F#Streaming-Only\" rel=\"nofollow ugc\">Free Streaming account with WebRTC & RTMP\u002FHLS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Self-hosted\u003C\u002Fstrong>: Deploy \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fvideowhisper\u002Fvideowhisper-webrtc\" rel=\"nofollow ugc\">VideoWhisper WebRTC Server\u003C\u002Fa> on your own VPS for full control\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Live Demos\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Turnkey site: \u003Ca href=\"https:\u002F\u002Fvideonow.live\u002F\" rel=\"nofollow ugc\">VideoNow.Live\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>WebRTC P2P streaming: \u003Ca href=\"https:\u002F\u002Fdemo.videowhisper.com\u002Fvws-html5-livestreaming\u002F\" rel=\"nofollow ugc\">WebRTC Live Streaming Demo\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Broadcasting & Playback\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WebRTC broadcast and playback via React app with configurable quality (resolution, framerate, bitrate caps)\u003C\u002Fli>\n\u003Cli>HTML5 HLS \u002F MPEG-DASH live video delivery with automatic protocol selection\u003C\u002Fli>\n\u003Cli>External encoder support: OBS, Wirecast, XSplit, Larix Broadcaster (iOS\u002FAndroid)\u003C\u002Fli>\n\u003Cli>24\u002F7 IP camera restreaming (RTSP, RTMP, RTMPS, HTTP\u002FHTTPS sources) with Setup Wizard\u003C\u002Fli>\n\u003Cli>Recording per channel, including WebRTC streams\u003C\u002Fli>\n\u003Cli>Video archive import with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fvideo-share-vod\u002F\" rel=\"ugc\">Video Share VOD\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Channel Management\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Live video channels as WordPress custom post type\u003C\u002Fli>\n\u003Cli>Frontend channel setup and management with card-based grid layout\u003C\u002Fli>\n\u003Cli>Visual status labels: Live, Schedule, IP Camera, WebRTC, Recording, Paused, Restricted\u003C\u002Fli>\n\u003Cli>Context-aware menus adapting to channel interface type (WebRTC App, Restream, HTML5 Videochat, DASH)\u003C\u002Fli>\n\u003Cli>Breadcrumb navigation for intuitive channel management\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Scheduling & Automation\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Visual schedule editor with daily, weekly, and one-time programming\u003C\u002Fli>\n\u003Cli>Multiple source types per program: live stream, video file, video folder (with play order and loop options)\u003C\u002Fli>\n\u003Cli>Source priority system with drag-and-drop reordering\u003C\u002Fli>\n\u003Cli>Default filler content when no program is scheduled\u003C\u002Fli>\n\u003Cli>Live\u002Ffallback behavior settings per program\u003C\u002Fli>\n\u003Cli>Timezone support with live clock display\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Channel Listings\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Template-based listings with customizable placeholders (#title#, #thumb#, #viewers#, #tags#, #rating#)\u003C\u002Fli>\n\u003Cli>Ready-made listing skins: Twitchy (Twitch-inspired dark theme), Ticky (TikTok-inspired vertical cards)\u003C\u002Fli>\n\u003Cli>AJAX live updates with category filtering, tags, and search\u003C\u002Fli>\n\u003Cli>Offline video thumbnails and teaser support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Monetization\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Membership-ready with WordPress role permissions — works with any membership\u002Fsubscription plugin\u003C\u002Fli>\n\u003Cli>Pay-per-view with custom post type — compatible with access control and content selling plugins\u003C\u002Fli>\n\u003Cli>Tips to broadcasters with myCRED or TeraWallet (WooCommerce gateways)\u003C\u002Fli>\n\u003Cli>Channel access lists: restrict by user role, login, email, or password\u003C\u002Fli>\n\u003Cli>Recommended: \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpaid-membership\u002F\" rel=\"ugc\">Paid Membership\u003C\u002Fa> for credit-based membership purchases\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Restreaming & IP Cameras\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Admin restream dashboard with server status, capacity monitoring, and per-stream controls\u003C\u002Fli>\n\u003Cli>Frontend restream channel creation with guest access support\u003C\u002Fli>\n\u003Cli>Stream pause\u002Fresume, mute audio, auto-cleanup for guest channels\u003C\u002Fli>\n\u003Cli>Private network detection with confirmation for local sources\u003C\u002Fli>\n\u003Cli>Push channel configuration to VideoWhisper server\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Chat & Interaction\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>AJAX chat alongside live video playback\u003C\u002Fli>\n\u003Cli>Custom ads in chat for monetization\u003C\u002Fli>\n\u003Cli>Floating watermark\u002Flogo overlay\u003C\u002Fli>\n\u003Cli>Event details display (title, schedule, description) when channel is offline\u003C\u002Fli>\n\u003Cli>Integrates \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frate-star-review\u002F\" rel=\"ugc\">Rate Star Review\u003C\u002Fa> for channel ratings\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Access Control & Administration\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Fine-grained permissions by role, email, ID, or username\u003C\u002Fli>\n\u003Cli>Broadcast and watch time limits per channel and per membership level\u003C\u002Fli>\n\u003Cli>Premium channels with unlimited membership levels\u003C\u002Fli>\n\u003Cli>Channel statistics: broadcast time, watch time, last activity, viewer counts\u003C\u002Fli>\n\u003Cli>BuddyPress integration: Live Stream tab in groups\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Who Is This For?\u003C\u002Fh4>\n\u003Cp>Build platforms similar to Twitch, YouTube Live, Kick, or LiveStream — a self-hosted alternative where you own the content, control access, and keep 100% of revenue. Perfect for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Media companies\u003C\u002Fstrong> — launch branded streaming channels\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Educators\u003C\u002Fstrong> — deliver live classes, webinars, and scheduled course content\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Churches & organizations\u003C\u002Fstrong> — stream events and services 24\u002F7\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Surveillance\u003C\u002Fstrong> — monitor IP cameras with web-based access control\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Creators & entertainers\u003C\u002Fstrong> — monetize live content with tips, pay-per-view, and memberships\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Hosting Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>This plugin requires \u003Ca href=\"https:\u002F\u002Fvideowhisper.com\u002F?p=Requirements\" rel=\"nofollow ugc\">streaming server infrastructure\u003C\u002Fa> beyond standard WordPress hosting\u003C\u002Fli>\n\u003Cli>For testing, register for a \u003Ca href=\"https:\u002F\u002Fwebrtchost.com\u002Fhosting-plans\u002F#Streaming-Only\" rel=\"nofollow ugc\">Free Streaming account\u003C\u002Fa> with WebRTC & RTMP\u002FHLS\u003C\u002Fli>\n\u003Cli>Self-hosted: deploy \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fvideowhisper\u002Fvideowhisper-webrtc\" rel=\"nofollow ugc\">VideoWhisper WebRTC Server\u003C\u002Fa> on a VPS or dedicated server\u003C\u002Fli>\n\u003Cli>Some advanced features (FFmpeg transcoding, server commands) require additional server configuration — disabled by default for security\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Attributions\u003C\u002Fh3>\n\u003Cp>Some demo site screenshots show tests with the “Big Buck Bunny” video, available under Creative Commons Attribution at https:\u002F\u002Fpeach.blender.org\u002Fdownload\u002F .\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Plugin Homepage: https:\u002F\u002Fbroadcastlivevideo.com\u003C\u002Fli>\n\u003Cli>Developer Contact: https:\u002F\u002Fconsult.videowhisper.com\u003C\u002Fli>\n\u003Cli>VideoWhisper Server: https:\u002F\u002Fgithub.com\u002Fvideowhisper\u002Fvideowhisper-webrtc\u003C\u002Fli>\n\u003Cli>WebRTC Streaming App: https:\u002F\u002Fgithub.com\u002Fvideowhisper\u002FWebcam-Streaming-WebRTC\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Demo\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Live demo site: https:\u002F\u002Fvideonow.live\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Extra\u003C\u002Fh3>\n\u003Cp>More information, latest updates, other plugins and non-WordPress editions at https:\u002F\u002Fvideowhisper.com\u002F .\u003C\u002Fp>\n","Live video streaming with WebRTC, HLS, RTMP — broadcast from webcam, OBS, IP cameras. Channel management, scheduling, chat, membership, pay-per-view.",500,426661,54,14,"2026-03-07T11:45:00.000Z","6.9.4","5.0","7.4",[20,21,22,23,24],"broadcast","live","streaming","video","webcam","https:\u002F\u002Fvideowhisper.com\u002F?p=WordPress+Live+Streaming","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvideowhisper-live-streaming-integration.zip",82,12,0,"2025-05-19 00:00:00","2026-03-15T15:16:48.613Z",[33,49,65,76,91,105,118,132,141,150,161,172],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2025-48255","broadcast-live-video-live-streaming-webrtc-hls-rtsp-rtmp-cross-site-request-forgery","Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP \u003C= 6.2.4 - Cross-Site Request Forgery","The Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=6.2.4","6.2.5","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-05-28 17:01:24",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F2bc82c22-8fac-409d-9331-b5cc3bd29c43?source=api-prod",10,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":56,"cvss_score":57,"cvss_vector":58,"vuln_type":59,"published_date":60,"updated_date":61,"references":62,"days_to_patch":64},"CVE-2025-26752","broadcast-live-video-live-streaming-webrtc-hls-rtsp-rtmp-unauthenticated-arbitrary-file-deletion","Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP \u003C= 6.1.10 - Unauthenticated Arbitrary File Deletion","The Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 6.1.10. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).","\u003C=6.1.10","6.2.1","critical",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","2025-02-14 00:00:00","2025-03-03 21:10:52",[63],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F554fb91b-35eb-43c4-b949-4f07143e013f?source=api-prod",18,{"id":66,"url_slug":67,"title":68,"description":69,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":70,"cvss_score":71,"cvss_vector":72,"vuln_type":59,"published_date":60,"updated_date":73,"references":74,"days_to_patch":64},"CVE-2025-26753","broadcast-live-video-live-streaming-webrtc-hls-rtsp-rtmp-unauthenticated-arbitrary-file-read","Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP \u003C= 6.1.10 - Unauthenticated Arbitrary File Read","The Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.1.10. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.","high",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","2025-03-03 21:09:26",[75],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fc44e7178-790c-42ab-ac87-9a678e7b38d8?source=api-prod",{"id":77,"url_slug":78,"title":79,"description":80,"plugin_slug":4,"theme_slug":38,"affected_versions":81,"patched_in_version":82,"severity":41,"cvss_score":83,"cvss_vector":84,"vuln_type":85,"published_date":86,"updated_date":87,"references":88,"days_to_patch":90},"CVE-2024-12504","broadcast-live-video-live-streaming-html5-webrtc-hls-rtsp-rtmp-authenticated-contributor-stored-cross-site-scripting","Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP \u003C= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_hls' shortcode in all versions up to, and including, 6.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C=6.1.9","6.1.10",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-01-22 00:00:00","2025-01-23 11:13:29",[89],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F74b27798-3c6f-4c4e-80f8-7aa40f704fb7?source=api-prod",1,{"id":92,"url_slug":93,"title":94,"description":95,"plugin_slug":4,"theme_slug":38,"affected_versions":96,"patched_in_version":97,"severity":56,"cvss_score":57,"cvss_vector":98,"vuln_type":99,"published_date":100,"updated_date":101,"references":102,"days_to_patch":104},"CVE-2023-25699","live-streaming-broadcast-live-video-missing-authorization-to-unauthenticated-remote-code-execution","Live Streaming - Broadcast Live Video \u003C= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution","The Live Streaming - Broadcast Live Video Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 5.5.15. This allows unauthenticated attackers to execute code on the server.","\u003C=5.5.15","5.5.16","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","Improper Input Validation","2023-02-20 00:00:00","2024-01-22 19:56:02",[103],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F27180d98-223a-4d86-b8ea-e47da1d61bbf?source=api-prod",337,{"id":106,"url_slug":107,"title":108,"description":109,"plugin_slug":4,"theme_slug":38,"affected_versions":110,"patched_in_version":111,"severity":41,"cvss_score":112,"cvss_vector":113,"vuln_type":85,"published_date":114,"updated_date":101,"references":115,"days_to_patch":117},"CVE-2014-4569","broadcast-live-video-live-streaming-cross-site-scripting","Broadcast Live Video – Live Streaming \u003C 4.27.4 - Cross-Site Scripting","Cross-site scripting (XSS) vulnerability in ls\u002Fvv_login.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the room_name parameter.","\u003C4.27.4","4.27.4",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","2014-07-01 00:00:00",[116],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fa96da08b-f43d-4432-8c47-c86a1a1299ae?source=api-prod",3493,{"id":119,"url_slug":120,"title":121,"description":122,"plugin_slug":4,"theme_slug":38,"affected_versions":123,"patched_in_version":124,"severity":41,"cvss_score":125,"cvss_vector":126,"vuln_type":127,"published_date":128,"updated_date":101,"references":129,"days_to_patch":131},"CVE-2014-1908","broadcast-live-video-live-streaming-full-path-disclosure","Broadcast Live Video – Live Streaming \u003C 4.29.5 - Full Path Disclosure","The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls\u002Frtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message.","\u003C4.29.5","4.29.5",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","Exposure of Sensitive Information to an Unauthorized Actor","2014-02-27 00:00:00",[130],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F959846a3-0e57-4227-a52b-942b589596f0?source=api-prod",3617,{"id":133,"url_slug":134,"title":135,"description":136,"plugin_slug":4,"theme_slug":38,"affected_versions":123,"patched_in_version":124,"severity":56,"cvss_score":137,"cvss_vector":138,"vuln_type":59,"published_date":128,"updated_date":101,"references":139,"days_to_patch":131},"CVE-2014-1907","broadcast-live-video-live-streaming-html5-webrtc-hls-rtsp-rtmp-arbitrary-file-readdeletion","Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP \u003C 4.29.5 - Arbitrary File Read\u002FDeletion","Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the s parameter to ls\u002Frtmp_login.php or (2) delete arbitrary files via a .. (dot dot) in the s parameter to ls\u002Frtmp_logout.php.",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[140],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fa5e45e96-3cfb-42a9-b8b7-519489bc03ad?source=api-prod",{"id":142,"url_slug":143,"title":144,"description":145,"plugin_slug":4,"theme_slug":38,"affected_versions":146,"patched_in_version":124,"severity":56,"cvss_score":137,"cvss_vector":138,"vuln_type":147,"published_date":128,"updated_date":101,"references":148,"days_to_patch":131},"CVE-2014-1905","broadcast-live-video-live-streaming-html5-webrtc-hls-rtsp-rtmp-arbitrary-file-upload","Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP \u003C= 4.27.4 - Arbitrary File Upload","Unrestricted file upload vulnerability in ls\u002Fvw_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, and then accessing the file via a direct request to a wp-content\u002Fplugins\u002Fvideowhisper-live-streaming-integration\u002Fls\u002Fsnapshots\u002F pathname, as demonstrated by a .php.jpg filename.","\u003C=4.27.4","Unrestricted Upload of File with Dangerous Type",[149],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ff6e4c583-c0d5-4040-86d5-0f1b4dddcb81?source=api-prod",{"id":151,"url_slug":152,"title":153,"description":154,"plugin_slug":4,"theme_slug":38,"affected_versions":155,"patched_in_version":156,"severity":41,"cvss_score":112,"cvss_vector":113,"vuln_type":85,"published_date":157,"updated_date":101,"references":158,"days_to_patch":160},"CVE-2014-2297","broadcast-live-video-live-streaming-html5-webrtc-hls-rtsp-rtmp-cross-site-scripting-2","Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP \u003C= 4.29.6 - Cross-Site Scripting","Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to ls\u002Fhtmlchat.php or (2) bgcolor parameter to ls\u002Findex.php. NOTE: vector 1 may overlap CVE-2014-1906.4.","\u003C=4.29.6","4.29.9","2014-02-26 00:00:00",[159],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F3b3a2738-5312-4b34-9bd3-4ff95a91706e?source=api-prod",3618,{"id":162,"url_slug":163,"title":164,"description":165,"plugin_slug":4,"theme_slug":38,"affected_versions":123,"patched_in_version":124,"severity":70,"cvss_score":166,"cvss_vector":167,"vuln_type":85,"published_date":168,"updated_date":101,"references":169,"days_to_patch":171},"CVE-2014-1906","broadcast-live-video-live-streaming-html5-webrtc-hls-rtsp-rtmp-cross-site-scripting","Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP \u003C 4.29.5 - Cross-Site Scripting","Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) m parameter to lb_status.php; (2) msg parameter to vc_chatlog.php; n parameter to (3) channel.php, (4) htmlchat.php, (5) video.php, or (6) videotext.php; (7) message parameter to lb_logout.php; or ct parameter to (8) lb_status.php or (9) v_status.php in ls\u002F.",7.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:L","2014-02-06 00:00:00",[170],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F36aecabd-4982-426d-be47-075c23a452a2?source=api-prod",3638,{"id":173,"url_slug":174,"title":175,"description":176,"plugin_slug":4,"theme_slug":38,"affected_versions":177,"patched_in_version":178,"severity":41,"cvss_score":112,"cvss_vector":113,"vuln_type":85,"published_date":179,"updated_date":101,"references":180,"days_to_patch":182},"CVE-2013-5714","broadcast-live-video-live-streaming-html5-webrtc-hls-rtsp-rtmp-reflected-cross-site-scripting","Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP \u003C= 4.25.3 - Reflected Cross-Site Scripting","Multiple cross-site scripting (XSS) vulnerabilities in ls\u002Fhtmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameter.","\u003C=4.25.3","4.27","2013-08-23 00:00:00",[181],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F51880262-78ad-4791-8e3d-f6718de9f2a2?source=api-prod",3805,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":184,"avg_security_score":185,"avg_patch_time_days":186,"trust_score":187,"computed_at":188},1270,93,1072,74,"2026-04-04T13:50:24.864Z",[190,214,235,256,273],{"slug":191,"name":192,"version":193,"author":191,"author_profile":194,"description":195,"short_description":196,"active_installs":197,"downloaded":198,"rating":199,"num_ratings":200,"last_updated":201,"tested_up_to":16,"requires_at_least":202,"requires_php":203,"tags":204,"homepage":209,"download_link":210,"security_score":211,"vuln_count":212,"unpatched_count":29,"last_vuln_date":213,"fetched_at":31},"wpstream","WpStream – Live Streaming, Video on Demand, Pay Per View","4.11.1","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpstream\u002F","\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FTopBhvGvwbs?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>WpStream is the only video streaming solution on WordPress that is designed to help you create your video streaming website without adding any load to your hosting server.\u003C\u002Fp>\n\u003Cp>WpStream makes it possible for you to stream live content directly on your site, bypassing the need for third-party solutions. By taking control of your live stream, you can fully maximize the use of your video content, choosing how to display it, to whom, and whether you want to charge for it.\u003C\u002Fp>\n\u003Ch3>\u003Ca href=\"https:\u002F\u002Fwpstream.net\u002Fwpstream-video-streaming-theme\u002F\" rel=\"nofollow ugc\">Hello WpStream Theme\u003C\u002Fa>\u003C\u002Fh3>\n\u003Cp>Hello WpStream is a lightweight, flexible WordPress theme designed for seamless integration with WpStream, the ultimate live streaming plugin. Perfect for businesses and creators, this theme offers an intuitive setup, responsive design, and full support for live shopping, video content, and real-time interactions. Whether you’re hosting live events, product launches, or virtual classes, Hello WpStream makes it easy to engage your audience and enhance your e-commerce experience.\u003C\u002Fp>\n\u003Ch3>Live Streaming\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpstream.net\u002Flive-streaming\u002F\" rel=\"nofollow ugc\">Live Streaming on your website\u003C\u002Fa> can be carried out directly from your browser or with the help of Streaming Apps with custom RTMP. With just a webcam, you can go live in less than 3 minutes. As for streaming apps, a few popular client picks are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>OBS Studio\u003C\u002Fli>\n\u003Cli>StreamYard\u003C\u002Fli>\n\u003Cli>Restream\u003C\u002Fli>\n\u003Cli>Wirecast\u003C\u002Fli>\n\u003Cli>Larix\u003C\u002Fli>\n\u003Cli>Melon App\u003C\u002Fli>\n\u003Cli>Streamlabs\u003C\u002Fli>\n\u003Cli>Zoom\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Whether you are using your laptop, phone, or GoPro, going LIVE and streaming video on your website has never been easier. Gone are the days where you needed a sophisticated and complex live streaming set up. Free-To-View, Pay-Per-View, and Subscription live streams available.\u003C\u002Fp>\n\u003Ch3>Recordings \u002F Video On Demand (VODs)\u003C\u002Fh3>\n\u003Cp>Record your live streams or upload video files to create \u003Ca href=\"https:\u002F\u002Fwpstream.net\u002Frecordings-video-on-demand\u002F\" rel=\"nofollow ugc\">Video-On-Demand content\u003C\u002Fa>. Video playback or streaming video is compatible on all modern browsers and platforms.\u003C\u002Fp>\n\u003Cp>Allow your viewers to catch up on your video content by offering it On Demand. Free-To-View, Pay-Per-View, and Subscription VOD available.\u003C\u002Fp>\n\u003Ch3>Monetization with WooCommerce\u003C\u002Fh3>\n\u003Cp>Live streaming and \u003Ca href=\"https:\u002F\u002Fwpstream.net\u002Fmonetization\u002F\" rel=\"nofollow ugc\">VOD monetization is carried out with WooCommerce\u003C\u002Fa>. Transform your business idea into one that includes video streaming and watch how your profits follow. With just a basic setup, you can create your Pay-Per-View and Subscription Livestreams and VODs on your website.\u003C\u002Fp>\n\u003Ch3>Content Rights and Free Speech\u003C\u002Fh3>\n\u003Cp>WpStream believes in your \u003Ca href=\"https:\u002F\u002Fwpstream.net\u002Ffree-speech-and-content-rights\u002F\" rel=\"nofollow ugc\">Right to Free Speech\u003C\u002Fa> and autonomy over what you live stream on your website. Add your own logo, branding, and identity to your live streams and videos.\u003C\u002Fp>\n\u003Cp>If you have a private event, you can set up a \u003Ca href=\"https:\u002F\u002Fwpstream.net\u002Fpassword-protected-live-streaming-everything-you-need-to-know\u002F\" rel=\"nofollow ugc\"> password protected live stream\u003C\u002Fa>. Perfect for company meetings, kids activities, weddings, and other private events.\u003C\u002Fp>\n\u003Ch3>Widgets, blocks, and shortcodes\u003C\u002Fh3>\n\u003Ch4>Live and VOD Player embedding\u003C\u002Fh4>\n\u003Cp>Each Live Stream and On Demand video will have its own pre-made video page. Alternatively, customize the location and position of the video player using the \u003Ca href=\"https:\u002F\u002Fwpstream.net\u002Fwpstream-shortcodes\u002F\" rel=\"nofollow ugc\">“WpStream Player” block, widget, or regular shortcode\u003C\u002Fa>. Available with Elementor, WPBakery, and other page builders.\u003C\u002Fp>\n\u003Ch4>E-Commerce Marketplace \u002F TWITCH feature\u003C\u002Fh4>\n\u003Cp>Allow regular users, streamers, and influencers to go LIVE on your website via the front-end (like TWITCH). Set up profiles and add the \u003Ca href=\"https:\u002F\u002Fdocs.wpstream.net\u002Fdocs\u002Felementor-3\u002F\" rel=\"nofollow ugc\">“Start Streaming” block, widget, or shortcode\u003C\u002Fa> to their page so they can go live at any time without admin access. Available with Elementor, WPBakery, and other page builders.\u003C\u002Fp>\n\u003Ch4>Live Channels and Video Lists\u003C\u002Fh4>\n\u003Cp>Show viewers which streamer or channel is currently LIVE on your video streaming website and all the On Demand videos they can catch up with any time, any where, on any device. Use the \u003Ca href=\"https:\u002F\u002Fwpstream.net\u002Fwpstream-shortcodes\u002F\" rel=\"nofollow ugc\">WpStream Channel List or WpStream Video on Demand List\u003C\u002Fa>.  Available with Elementor, WPBakery, and other page builders.\u003C\u002Fp>\n\u003Cp>Check out our \u003Ca href=\"https:\u002F\u002Fdocs.wpstream.net\u002Fdocs-category\u002Fgetting-started\u002F\" rel=\"nofollow ugc\">documentation\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwpstream.net\u002Fblog\u002F\" rel=\"nofollow ugc\">blog\u003C\u002Fa>, and \u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fchannel\u002FUCIjItiJc4Z7aJApj3W6ArJA\" rel=\"nofollow ugc\">YouTube Channel\u003C\u002Fa> for latest updates, tips, and instructions on how to create your video streaming website.\u003C\u002Fp>\n\u003Ch3>CONNECT WITH US\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fchannel\u002FUCIjItiJc4Z7aJApj3W6ArJA\" rel=\"nofollow ugc\">YouTube\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Ffacebook.com\u002Fwpstreamsoftware\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Ftwitter.com\u002Fstreaming4wp\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Flinkedin.com\u002Fcompany\u002Fwpstream\" rel=\"nofollow ugc\">LinkedIn\u003C\u002Fa>\u003C\u002Fp>\n","WpStream is a Video Streaming Plugin that lets you broadcast live events and helps you sell tickets or recordings via WooCommerce.",4000,417664,96,78,"2026-02-26T06:59:00.000Z","5.8","7.1",[20,205,206,207,208],"live-shopping","live-streaming","live-video","video-streaming","http:\u002F\u002Fwpstream.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpstream.4.11.1.zip",95,4,"2025-12-30 00:00:00",{"slug":215,"name":216,"version":217,"author":218,"author_profile":219,"description":220,"short_description":221,"active_installs":222,"downloaded":223,"rating":224,"num_ratings":225,"last_updated":226,"tested_up_to":16,"requires_at_least":227,"requires_php":228,"tags":229,"homepage":233,"download_link":234,"security_score":224,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"castio-live","Castio.live – WordPress Live Streaming (HLS) + Real‑Time Chat","1.1.0","proxymis","https:\u002F\u002Fprofiles.wordpress.org\u002Fproxymis\u002F","\u003Cp>Castio.live is a \u003Cstrong>WordPress live streaming plugin\u003C\u002Fstrong> that lets you \u003Cstrong>go live from your WordPress Admin\u003C\u002Fstrong> using modern browser technologies to generate HLS streams in real time, with built‑in real‑time chat for your audience.\u003C\u002Fp>\n\u003Cp>Unlike traditional live streaming solutions, Castio.live does \u003Cstrong>not require OBS, FFmpeg, RTMP servers, or any third-party streaming platform\u003C\u002Fstrong>. Live streaming and real‑time chat run entirely on your own WordPress server.\u003C\u002Fp>\n\u003Ch3>At a Glance\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Live stream from WordPress Admin (browser HLS)\u003C\u002Fli>\n\u003Cli>Real‑time chat alongside your live stream\u003C\u002Fli>\n\u003Cli>No OBS, no RTMP, no external services\u003C\u002Fli>\n\u003Cli>Auto-generated viewer page with HLS player\u003C\u002Fli>\n\u003Cli>Works on shared hosting, VPS, dedicated servers\u003C\u002Fli>\n\u003Cli>Optional pay‑per‑view and subscriptions via Stripe\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Ffgw2u0fmAME?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>👉 \u003Cstrong>Start streaming in minutes\u003C\u002Fstrong>\u003Cbr \u002F>\nInstall the plugin, click “Start Streaming” in WordPress Admin, and instantly share your live viewer page with your audience.\u003C\u002Fp>\n\u003Cp>No streaming SaaS. No vendor lock-in. Full control over your content.\u003C\u002Fp>\n\u003Ch3>Live Streaming from WordPress Admin\u003C\u002Fh3>\n\u003Cp>Castio.live adds a dedicated streaming interface directly inside the WordPress Admin area.\u003C\u002Fp>\n\u003Cp>You can:\u003Cbr \u002F>\n– Select your camera and microphone\u003Cbr \u002F>\n– Preview your stream before going live\u003Cbr \u002F>\n– Start and stop streaming with a single click\u003C\u002Fp>\n\u003Cp>Supported capture technologies:\u003Cbr \u002F>\n– MediaDevices API\u003Cbr \u002F>\n– MediaRecorder\u003Cbr \u002F>\n– WebCodecs (when available, for lower latency)\u003C\u002Fp>\n\u003Cp>Supported streaming browsers:\u003Cbr \u002F>\n– Chrome or Edge (desktop)\u003Cbr \u002F>\n– Chrome (Android)\u003C\u002Fp>\n\u003Cp>Viewer playback works on all modern browsers, including mobile devices.\u003C\u002Fp>\n\u003Ch3>Viewer Page (Auto-Generated)\u003C\u002Fh3>\n\u003Cp>For each live stream, Castio.live can automatically generate a viewer page.\u003C\u002Fp>\n\u003Cp>Viewer page features:\u003Cbr \u002F>\n– HLS video playback (native HLS on Safari, hls.js on other browsers)\u003Cbr \u002F>\n– Clean and lightweight interface\u003Cbr \u002F>\n– Mobile-friendly layout\u003Cbr \u002F>\n– Optional live chat panel\u003C\u002Fp>\n\u003Cp>The viewer page URL can be:\u003Cbr \u002F>\n– Public\u003Cbr \u002F>\n– Shared privately\u003Cbr \u002F>\n– Embedded into other pages\u003Cbr \u002F>\n– Protected via access control options\u003C\u002Fp>\n\u003Ch3>Built-in Real-Time Chat\u003C\u002Fh3>\n\u003Cp>Each live stream includes a built-in real‑time chat system.\u003C\u002Fp>\n\u003Cp>Chat features:\u003Cbr \u002F>\n– AJAX-based live message polling\u003Cbr \u002F>\n– Username display\u003Cbr \u002F>\n– Automatic refresh\u003Cbr \u002F>\n– Message history stored in the WordPress database\u003C\u002Fp>\n\u003Cp>Moderation tools:\u003Cbr \u002F>\n– View all messages\u003Cbr \u002F>\n– Delete individual messages\u003Cbr \u002F>\n– Ban users by username\u003Cbr \u002F>\n– Ban users by IP address\u003C\u002Fp>\n\u003Cp>No external chat service is required.\u003C\u002Fp>\n\u003Ch3>Privacy, Ownership, and Compliance\u003C\u002Fh3>\n\u003Cp>Castio.live is designed with privacy and data ownership as a core principle.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>No third-party streaming services\u003C\u002Fli>\n\u003Cli>No external chat providers\u003C\u002Fli>\n\u003Cli>No analytics or tracking scripts included by default\u003C\u002Fli>\n\u003Cli>No cloud-based video or message processing\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>All streaming and chat data remains on your own server:\u003Cbr \u002F>\n– HLS video segments\u003Cbr \u002F>\n– Chat messages\u003Cbr \u002F>\n– Stream metadata\u003Cbr \u002F>\n– Viewer page configuration\u003C\u002Fp>\n\u003Cp>This design helps simplify compliance with GDPR and similar data protection regulations.\u003C\u002Fp>\n\u003Ch3>Technical Architecture\u003C\u002Fh3>\n\u003Cp>Castio.live is a fully WordPress-native plugin.\u003C\u002Fp>\n\u003Cp>No dependencies on:\u003Cbr \u002F>\n– FFmpeg\u003Cbr \u002F>\n– Node.js\u003Cbr \u002F>\n– RTMP servers\u003Cbr \u002F>\n– External streaming APIs\u003C\u002Fp>\n\u003Cp>Core components:\u003Cbr \u002F>\n– Browser-based HLS generation\u003Cbr \u002F>\n– PHP for stream lifecycle and data storage\u003Cbr \u002F>\n– JavaScript for capture, playback, and chat\u003Cbr \u002F>\n– WordPress custom post types and options\u003C\u002Fp>\n\u003Cp>The plugin works on shared hosting, VPS, and dedicated servers.\u003C\u002Fp>\n\u003Ch3>Key Features Summary\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Live stream directly from WordPress Admin\u003C\u002Fli>\n\u003Cli>No OBS, no RTMP, no external streaming platform\u003C\u002Fli>\n\u003Cli>Browser-generated HLS (.m3u8 + .ts)\u003C\u002Fli>\n\u003Cli>Automatic viewer page creation\u003C\u002Fli>\n\u003Cli>Built-in live chat\u003C\u002Fli>\n\u003Cli>Chat moderation tools\u003C\u002Fli>\n\u003Cli>Mobile-friendly viewer experience\u003C\u002Fli>\n\u003Cli>All streaming and chat data stored locally\u003C\u002Fli>\n\u003Cli>Lightweight and efficient\u003C\u002Fli>\n\u003Cli>Compatible with most CDNs, including Cloudflare\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Who Is This Plugin For?\u003C\u002Fh3>\n\u003Cp>Castio.live is ideal for:\u003Cbr \u002F>\n– Educators and online trainers\u003Cbr \u002F>\n– Content creators\u003Cbr \u002F>\n– Community websites\u003Cbr \u002F>\n– Event organizers\u003Cbr \u002F>\n– Developers and agencies\u003Cbr \u002F>\n– Anyone who wants full control over live streaming without SaaS platforms\u003C\u002Fp>\n\u003Ch3>Source Code and Third-Party Libraries\u003C\u002Fh3>\n\u003Cp>This plugin includes both original source code and third-party JavaScript libraries.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Original plugin code\u003C\u002Fstrong>\u003Cbr \u002F>\n– Unminified, human-readable JavaScript files are included directly in the plugin.\u003Cbr \u002F>\n– No obfuscated or encrypted code is used.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Third-party libraries (vendored, unmodified)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>MediaBunny\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>File: \u003Ccode>assets\u002Fjs\u002Fvendor\u002Fmediabunny\u002Fmediabunny.esm.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Source: https:\u002F\u002Fgithub.com\u002FVanilagy\u002Fmediabunny\u003C\u002Fli>\n\u003Cli>License: MIT\u003C\u002Fli>\n\u003Cli>Used for browser-based media processing.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>hls.js\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>File: \u003Ccode>assets\u002Fjs\u002Fvendor\u002Fhls\u002Fhls.min.js\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Source: https:\u002F\u002Fgithub.com\u002Fvideo-dev\u002Fhls.js\u003C\u002Fli>\n\u003Cli>License: Apache License 2.0\u003C\u002Fli>\n\u003Cli>Used for HLS playback on non-Safari browsers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>These libraries are included for performance and compatibility reasons.\u003Cbr \u002F>\nAll libraries retain their original licenses and copyright notices.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to external third-party services to provide optional monetization and licensing features.\u003C\u002Fp>\n\u003Ch3>Stripe Payments\u003C\u002Fh3>\n\u003Cp>Castio.live can integrate with Stripe to allow site owners to sell access to live or recorded streams, including pay-per-view content and subscriptions.\u003C\u002Fp>\n\u003Cp>What the service is used for:\u003Cbr \u002F>\nStripe is used to create checkout sessions, process payments, manage subscriptions, and retrieve payment reports related to paid video access.\u003C\u002Fp>\n\u003Cp>What data is sent and when:\u003Cbr \u002F>\nWhen a visitor purchases paid content or when the site owner views payment reports, the plugin sends the following data to Stripe:\u003Cbr \u002F>\n– Email address provided during checkout\u003Cbr \u002F>\n– Payment and checkout session identifiers\u003Cbr \u002F>\n– Purchased content or pricing identifiers\u003Cbr \u002F>\n– Subscription and payment status metadata\u003C\u002Fp>\n\u003Cp>No video streams, chat messages, or media content are transmitted to Stripe.\u003C\u002Fp>\n\u003Cp>Service provider:\u003Cbr \u002F>\nStripe, Inc.\u003C\u002Fp>\n\u003Cp>Terms of Service:\u003Cbr \u002F>\nhttps:\u002F\u002Fstripe.com\u002Flegal\u003C\u002Fp>\n\u003Cp>Privacy Policy:\u003Cbr \u002F>\nhttps:\u002F\u002Fstripe.com\u002Fprivacy\u003C\u002Fp>\n\u003Ch3>Castio.live Licensing Server\u003C\u002Fh3>\n\u003Cp>This plugin connects to the Castio.live licensing server to validate premium licenses and enable optional premium features.\u003C\u002Fp>\n\u003Cp>What the service is used for:\u003Cbr \u002F>\nThe licensing server is used to verify license validity and determine which premium features are available.\u003C\u002Fp>\n\u003Cp>What data is sent and when:\u003Cbr \u002F>\nDuring license validation (for example on activation, admin access, or periodic checks), the plugin sends:\u003Cbr \u002F>\n– License key\u003Cbr \u002F>\n– Site domain name\u003Cbr \u002F>\n– Plugin version\u003Cbr \u002F>\n– WordPress version\u003C\u002Fp>\n\u003Cp>No user-generated content, video streams, or personal data are transmitted.\u003C\u002Fp>\n\u003Cp>Service provider:\u003Cbr \u002F>\nCastio.live\u003C\u002Fp>\n\u003Cp>Terms of Service:\u003Cbr \u002F>\nhttps:\u002F\u002Fcastio.live\u002Fterms\u003C\u002Fp>\n\u003Cp>Privacy Policy:\u003Cbr \u002F>\nhttps:\u002F\u002Fcastio.live\u002Fprivacy\u003C\u002Fp>\n\u003Ch3>Demo and Additional Features\u003C\u002Fh3>\n\u003Cp>A public demo, documentation, and optional commercial features are available at:\u003Cbr \u002F>\nhttps:\u002F\u002Fcastio.live\u003C\u002Fp>\n\u003Cp>Commercial offerings may include:\u003Cbr \u002F>\n– Advanced access control\u003Cbr \u002F>\n– Enhanced chat moderation\u003Cbr \u002F>\n– Extended streaming options\u003Cbr \u002F>\n– Priority support\u003C\u002Fp>\n\u003Cp>The core live streaming and chat functionality works without requiring any external service.\u003C\u002Fp>\n\u003Ch3>Author and Support\u003C\u002Fh3>\n\u003Cp>Developed by proxymis\u003Cbr \u002F>\nWebsite: https:\u002F\u002Fproxymis.com\u003Cbr \u002F>\nContact: contact@proxymis.com\u003C\u002Fp>\n","WordPress live streaming via browser-based HLS. Go live from the admin—no OBS, no RTMP, no external services. Auto viewer page with HLS player and bui …",20,232,100,2,"2026-02-25T09:13:00.000Z","6.2","7.3",[230,206,207,231,232],"hls","livestream","video-player","https:\u002F\u002Fcastio.live","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcastio-live.zip",{"slug":236,"name":237,"version":238,"author":239,"author_profile":240,"description":241,"short_description":242,"active_installs":48,"downloaded":243,"rating":224,"num_ratings":225,"last_updated":244,"tested_up_to":245,"requires_at_least":246,"requires_php":247,"tags":248,"homepage":252,"download_link":253,"security_score":254,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":255},"cam-site-builder","Cam Site Builder","1.0.1","Modelnet","https:\u002F\u002Fprofiles.wordpress.org\u002Fmodelnet\u002F","\u003Cp>Cam Site Builder plugin allows you creating webcam site based on WordPress engine.\u003Cbr \u002F>\n*   You receive all models from Modelnet to your site\u003Cbr \u002F>\n*   You could earn money from the paid chats and tips from the brought customers\u003Cbr \u002F>\n*   It is easy to setup and doesn’t require to install streaming server\u003Cbr \u002F>\n*   Supports Cam Site Builder theme\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Ch3>A brief Markdown Example\u003C\u002Fh3>\n\u003Cp>Thank you\u003C\u002Fp>\n","With Cam Site Builder plugin you can easily add live webcams section into your website.",3142,"2017-09-13T10:47:00.000Z","4.7.32","4.7","",[249,250,251,208],"camming","live-chat-script","ppv-software","https:\u002F\u002Fwww.modelnet.club\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcam-site-builder.zip",85,"2026-03-15T14:54:45.397Z",{"slug":257,"name":258,"version":259,"author":260,"author_profile":261,"description":262,"short_description":263,"active_installs":48,"downloaded":264,"rating":224,"num_ratings":90,"last_updated":265,"tested_up_to":266,"requires_at_least":267,"requires_php":247,"tags":268,"homepage":271,"download_link":272,"security_score":254,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"live-broadcast","Live Broadcast","0.1.3","Valerio Souza","https:\u002F\u002Fprofiles.wordpress.org\u002Fvaleriosza\u002F","\u003Cp>This Plugin for streaming live in Text for WordPress\u003C\u002Fp>\n\u003Ch4>Descrição\u003C\u002Fh4>\n\u003Cp>Este Plugin permite fazer uma transmissão ao-vivo no seu WordPress\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>Live Broadcast is free software: you can redistribute it and\u002For modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.\u003C\u002Fp>\n\u003Cp>Live Broadcast is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.\u003C\u002Fp>\n\u003Cp>You should have received a copy of the GNU General Public License along with Notify Users E-Mail. If not, see \u003Ca href=\"http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002F\u003C\u002Fa>.\u003C\u002Fp>\n","Easy streaming live for WordPress",11587,"2014-09-04T13:51:00.000Z","4.0.38","3.0",[269,20,21,270,22],"blogging","post","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Flive-broadcast","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flive-broadcast.0.1.3.zip",{"slug":274,"name":275,"version":276,"author":277,"author_profile":278,"description":279,"short_description":280,"active_installs":48,"downloaded":281,"rating":29,"num_ratings":29,"last_updated":282,"tested_up_to":283,"requires_at_least":247,"requires_php":247,"tags":284,"homepage":247,"download_link":289,"security_score":254,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"vcp-events","VCP Events","1.0","kpmediadesigner","https:\u002F\u002Fprofiles.wordpress.org\u002Fkpmediadesigner\u002F","\u003Cp>For the best in interactive web events such as webinars and live streaming shows, this plugin will let you embed videos with a responsive Google+ comment stream attached to it that’s live – before, during, and after events.. You can add custom branding, descriptions, titles, and the plugin even gives you a way to display and discuss audience comments, taking engagement to a whole new level, where the audience becomes part of the live conversation.\u003C\u002Fp>\n\u003Ch4>Tutorial\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"560\" height=\"315\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FsRTFpW4SM5U?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>YouTube Live Stream Embed\u003Cbr \u002F>\nGoogle Comment Stream Embed\u003Cbr \u002F>\nAdjustable size ratio of video to comments\u003Cbr \u002F>\nResponsive interactivity\u003Cbr \u002F>\nSelective Google Fonts for comments\u003Cbr \u002F>\nMultiple font size options per comment\u003Cbr \u002F>\nCustom backgrounds for comments\u003Cbr \u002F>\nCustom Branding option\u003Cbr \u002F>\nOption to feature trailer video\u003Cbr \u002F>\nAdd event details and content \u002F links\u003Cbr \u002F>\nComment Stream available live from time of event posting\u003C\u002Fp>\n","Add a google plus comment stream next to a your livestream or video.",1200,"2018-04-18T18:34:00.000Z","4.8.28",[285,286,287,288,23],"comments","google","google-plus","livestreaming","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvcp-events.zip",{"attackSurface":291,"codeSignals":552,"taintFlows":995,"riskAssessment":1654,"analyzedAt":1675},{"hooks":292,"ajaxHandlers":387,"restRoutes":477,"shortcodes":486,"cronEvents":548,"entryPointCount":13,"unprotectedCount":551},[293,299,303,308,313,316,319,321,323,326,329,333,337,341,344,347,350,353,356,359,362,365,368,371,374,377,380,384],{"type":294,"name":295,"callback":296,"file":297,"line":298},"action","admin_notices","requirements_admin_notices","inc\\requirements.php",151,{"type":294,"name":300,"callback":301,"file":302,"line":64},"rest_api_init","registerWebcamAppRoutes","inc\\webcamapp.php",{"type":304,"name":305,"callback":306,"priority":48,"file":302,"line":307},"filter","script_loader_tag","webcamAppModuleScript",22,{"type":304,"name":309,"callback":310,"priority":90,"file":311,"line":312},"the_content","wpautop","videowhisper_streaming.php",72,{"type":304,"name":309,"callback":314,"priority":224,"file":311,"line":315},"shortcode_unautop",75,{"type":304,"name":317,"callback":317,"file":311,"line":318},"the_title",94,{"type":304,"name":309,"callback":320,"file":311,"line":211},"channel_page",{"type":304,"name":322,"callback":322,"file":311,"line":199},"query_vars",{"type":304,"name":324,"callback":324,"file":311,"line":325},"pre_get_posts",97,{"type":304,"name":327,"callback":328,"priority":48,"file":311,"line":224},"manage_channel_posts_columns","columns_head_channel",{"type":304,"name":330,"callback":331,"file":311,"line":332},"manage_edit-channel_sortable_columns","columns_register_sortable",101,{"type":294,"name":334,"callback":335,"priority":48,"file":311,"line":336},"manage_channel_posts_custom_column","columns_content_channel",102,{"type":304,"name":338,"callback":339,"file":311,"line":340},"request","duration_column_orderby",103,{"type":294,"name":342,"callback":342,"file":311,"line":343},"before_delete_post",137,{"type":294,"name":345,"callback":345,"file":311,"line":346},"wp_enqueue_scripts",202,{"type":294,"name":348,"callback":348,"file":311,"line":349},"init",7436,{"type":294,"name":351,"callback":351,"file":311,"line":352},"parse_request",7437,{"type":294,"name":354,"callback":354,"file":311,"line":355},"plugins_loaded",7439,{"type":294,"name":357,"callback":357,"file":311,"line":358},"admin_menu",7440,{"type":294,"name":360,"callback":360,"priority":224,"file":311,"line":361},"admin_bar_menu",7442,{"type":294,"name":363,"callback":363,"file":311,"line":364},"admin_head",7444,{"type":294,"name":366,"callback":366,"file":311,"line":367},"admin_init",7445,{"type":294,"name":369,"callback":369,"file":311,"line":370},"login_enqueue_scripts",7447,{"type":304,"name":372,"callback":372,"file":311,"line":373},"login_headerurl",7448,{"type":304,"name":375,"callback":375,"file":311,"line":376},"cron_schedules",7451,{"type":294,"name":378,"callback":378,"file":311,"line":379},"cron_10min_event",7452,{"type":294,"name":381,"callback":382,"file":311,"line":383},"bp_init","liveStreamingBP_init",7461,{"type":304,"name":385,"callback":385,"file":311,"line":386},"single_template",7463,[388,393,397,398,401,403,405,408,411,414,416,419,421,424,427,430,432,435,437,440,442,445,447,450,452,455,457,460,464,466,469,471,475],{"action":389,"nopriv":390,"callback":389,"hasNonce":391,"hasCapCheck":390,"file":297,"line":392},"vws_notice",false,true,152,{"action":394,"nopriv":390,"callback":395,"hasNonce":390,"hasCapCheck":390,"file":302,"line":396},"vw_webcamapp_config","webcamAppConfigAjax",19,{"action":394,"nopriv":391,"callback":395,"hasNonce":390,"hasCapCheck":390,"file":302,"line":222},{"action":399,"nopriv":390,"callback":399,"hasNonce":390,"hasCapCheck":390,"file":311,"line":400},"vwls_restream",147,{"action":399,"nopriv":391,"callback":399,"hasNonce":390,"hasCapCheck":390,"file":311,"line":402},148,{"action":404,"nopriv":390,"callback":404,"hasNonce":390,"hasCapCheck":390,"file":311,"line":298},"vwls_reset_restream_status",{"action":406,"nopriv":390,"callback":406,"hasNonce":390,"hasCapCheck":390,"file":311,"line":407},"vwls_pause_restream_stream",154,{"action":409,"nopriv":390,"callback":409,"hasNonce":390,"hasCapCheck":390,"file":311,"line":410},"vwls_get_stream_pin",157,{"action":412,"nopriv":390,"callback":412,"hasNonce":390,"hasCapCheck":390,"file":311,"line":413},"vw_restream_add_channel",160,{"action":412,"nopriv":391,"callback":412,"hasNonce":390,"hasCapCheck":390,"file":311,"line":415},161,{"action":417,"nopriv":390,"callback":417,"hasNonce":390,"hasCapCheck":390,"file":311,"line":418},"vw_restream_update_address",162,{"action":417,"nopriv":391,"callback":417,"hasNonce":390,"hasCapCheck":390,"file":311,"line":420},163,{"action":422,"nopriv":390,"callback":422,"hasNonce":390,"hasCapCheck":390,"file":311,"line":423},"vwls_update_stream_meta",166,{"action":425,"nopriv":390,"callback":425,"hasNonce":390,"hasCapCheck":390,"file":311,"line":426},"vwls_save_plan_data",167,{"action":428,"nopriv":390,"callback":428,"hasNonce":390,"hasCapCheck":390,"file":311,"line":429},"vwls_notify",169,{"action":428,"nopriv":391,"callback":428,"hasNonce":390,"hasCapCheck":390,"file":311,"line":431},170,{"action":433,"nopriv":390,"callback":433,"hasNonce":390,"hasCapCheck":390,"file":311,"line":434},"vwls_stream",172,{"action":433,"nopriv":391,"callback":433,"hasNonce":390,"hasCapCheck":390,"file":311,"line":436},173,{"action":438,"nopriv":390,"callback":438,"hasNonce":390,"hasCapCheck":390,"file":311,"line":439},"h5vls_app",176,{"action":438,"nopriv":391,"callback":438,"hasNonce":390,"hasCapCheck":390,"file":311,"line":441},177,{"action":443,"nopriv":390,"callback":443,"hasNonce":390,"hasCapCheck":390,"file":311,"line":444},"vwls_categories",180,{"action":443,"nopriv":391,"callback":443,"hasNonce":390,"hasCapCheck":390,"file":311,"line":446},181,{"action":448,"nopriv":390,"callback":448,"hasNonce":390,"hasCapCheck":390,"file":311,"line":449},"vwls_stream_setup",184,{"action":448,"nopriv":391,"callback":448,"hasNonce":390,"hasCapCheck":390,"file":311,"line":451},185,{"action":453,"nopriv":390,"callback":453,"hasNonce":390,"hasCapCheck":390,"file":311,"line":454},"vwls_playlist",187,{"action":453,"nopriv":391,"callback":453,"hasNonce":390,"hasCapCheck":390,"file":311,"line":456},188,{"action":458,"nopriv":390,"callback":458,"hasNonce":390,"hasCapCheck":390,"file":311,"line":459},"vwls_broadcast",190,{"action":461,"nopriv":390,"callback":462,"hasNonce":390,"hasCapCheck":390,"file":311,"line":463},"vwls","vwls_calls",192,{"action":461,"nopriv":391,"callback":462,"hasNonce":390,"hasCapCheck":390,"file":311,"line":465},193,{"action":467,"nopriv":390,"callback":467,"hasNonce":390,"hasCapCheck":390,"file":311,"line":468},"vwls_channels",195,{"action":467,"nopriv":391,"callback":467,"hasNonce":390,"hasCapCheck":390,"file":311,"line":470},196,{"action":472,"nopriv":390,"callback":473,"hasNonce":390,"hasCapCheck":390,"file":311,"line":474},"vwls_htmlchat","wp_ajax_vwls_htmlchat",198,{"action":472,"nopriv":391,"callback":473,"hasNonce":390,"hasCapCheck":390,"file":311,"line":476},199,[478],{"namespace":479,"route":480,"methods":481,"callback":483,"permissionCallback":484,"file":302,"line":485},"videowhisper\u002Fv1","\u002Fwebcamapp\u002Flogin",[482],"POST","webcamAppLoginEndpoint","__return_true",41,[487,491,494,497,500,503,506,509,512,515,518,521,524,527,530,533,536,539,542,545],{"tag":488,"callback":489,"file":302,"line":490},"videowhisper_webcam_app","webcamAppShortcode",21,{"tag":492,"callback":492,"file":311,"line":493},"videowhisper_h5vls_app",107,{"tag":495,"callback":495,"file":311,"line":496},"videowhisper_categories",109,{"tag":498,"callback":498,"file":311,"line":499},"videowhisper_channel_user",111,{"tag":501,"callback":501,"file":311,"line":502},"videowhisper_stream_setup",113,{"tag":504,"callback":504,"file":311,"line":505},"videowhisper_broadcast",115,{"tag":507,"callback":507,"file":311,"line":508},"videowhisper_external",117,{"tag":510,"callback":510,"file":311,"line":511},"videowhisper_external_broadcast",118,{"tag":513,"callback":513,"file":311,"line":514},"videowhisper_external_playback",119,{"tag":516,"callback":516,"file":311,"line":517},"videowhisper_watch",121,{"tag":519,"callback":519,"file":311,"line":520},"videowhisper_video",122,{"tag":522,"callback":522,"file":311,"line":523},"videowhisper_hls",124,{"tag":525,"callback":525,"file":311,"line":526},"videowhisper_mpeg",125,{"tag":528,"callback":528,"file":311,"line":529},"videowhisper_restream_player",126,{"tag":531,"callback":531,"file":311,"line":532},"videowhisper_restream_add",127,{"tag":534,"callback":534,"file":311,"line":535},"videowhisper_channel_manage",129,{"tag":537,"callback":537,"file":311,"line":538},"videowhisper_channels",130,{"tag":540,"callback":540,"file":311,"line":541},"videowhisper_webrtc_broadcast",132,{"tag":543,"callback":543,"file":311,"line":544},"videowhisper_webrtc_playback",133,{"tag":546,"callback":546,"file":311,"line":547},"videowhisper_htmlchat_playback",135,[549],{"hook":378,"callback":378,"file":311,"line":550},5144,33,{"dangerousFunctions":553,"sqlUsage":728,"outputEscaping":740,"fileOperations":493,"externalRequests":992,"nonceChecks":993,"capabilityChecks":48,"bundledLibraries":994},[554,559,561,563,565,567,570,573,576,581,584,586,588,590,593,596,599,601,603,605,607,611,614,617,620,623,625,627,629,631,633,635,637,639,641,645,647,649,651,653,656,658,660,662,664,666,669,672,674,676,679,681,684,687,689,691,694,696,698,701,704,706,708,711,713,716,718,720,723,726],{"fn":555,"file":556,"line":557,"context":558},"unserialize","inc\\h5videochat.php",123,"$userMeta = unserialize( $session->meta, array( 'allowed_classes' => false ) );",{"fn":555,"file":556,"line":560,"context":558},1384,{"fn":555,"file":556,"line":562,"context":558},1448,{"fn":555,"file":556,"line":564,"context":558},2071,{"fn":555,"file":556,"line":566,"context":558},2205,{"fn":555,"file":556,"line":568,"context":569},2554,"$roomOptions = unserialize( $session->roptions, array( 'allowed_classes' => false ) );",{"fn":555,"file":556,"line":571,"context":572},2802,"$meta = unserialize( $sqlRow->meta, array( 'allowed_classes' => false ) );",{"fn":555,"file":556,"line":574,"context":575},3593,"$userMeta = unserialize( $sqlRow->meta, array( 'allowed_classes' => false ) );",{"fn":577,"file":578,"line":579,"context":580},"exec","inc\\iptv.php",36,"if ( $options['enable_exec'] ) $processId = exec( $cmd . ' echo $!;', $output, $returnvalue );",{"fn":577,"file":578,"line":582,"context":583},38,"if ( $options['enable_exec'] ) exec( 'echo ' . escapeshellarg($cmd) . ' >> ' . escapeshellarg($log_f",{"fn":577,"file":578,"line":496,"context":585},"if ( $options['enable_exec'] ) exec( $cmd, $output, $returnvalue );",{"fn":577,"file":578,"line":587,"context":585},143,{"fn":577,"file":578,"line":589,"context":585},200,{"fn":577,"file":578,"line":591,"context":592},211,"if ( $options['enable_exec'] ) exec( $kcmd, $koutput, $kreturnvalue );",{"fn":577,"file":578,"line":594,"context":595},345,"if ( $options['enable_exec'] ) exec( 'echo ' . escapeshellarg( date( DATE_RFC2822 ) . ':: ' . $cmd )",{"fn":577,"file":578,"line":597,"context":598},347,"if ( $options['enable_exec'] ) $pid = exec( $cmd, $output, $returnvalue );",{"fn":577,"file":578,"line":600,"context":585},816,{"fn":577,"file":578,"line":602,"context":583},817,{"fn":577,"file":578,"line":604,"context":585},841,{"fn":577,"file":578,"line":606,"context":583},842,{"fn":555,"file":608,"line":609,"context":610},"inc\\options.php",322,"'goalsDefault'                    => unserialize( 'a:5:{i:1;a:6:{s:4:\"name\";s:13:\"Break the Ice\";s:1",{"fn":555,"file":608,"line":612,"context":613},324,"'appSetup'                        => unserialize( 'a:3:{s:6:\"Config\";a:22:{s:8:\"darkMode\";s:0:\"\";s:7",{"fn":555,"file":608,"line":615,"context":616},410,"'appRoles'                        => unserialize( 'a:3:{s:27:\"conferenceParticipantCamera\";a:3:{s:5:",{"fn":555,"file":608,"line":618,"context":619},2244,"update_option( 'VWdeepLlangs', unserialize( 'a:31:{s:2:\"bg\";s:9:\"Bulgarian\";s:2:\"cs\";s:5:\"Czech\";s:2",{"fn":577,"file":608,"line":621,"context":622},2295,"if ( exec( 'echo EXEC' ) == 'EXEC' ) {",{"fn":577,"file":608,"line":624,"context":585},2311,{"fn":577,"file":608,"line":626,"context":585},2322,{"fn":577,"file":608,"line":628,"context":585},2343,{"fn":577,"file":608,"line":630,"context":585},2384,{"fn":577,"file":608,"line":632,"context":585},2403,{"fn":577,"file":608,"line":634,"context":585},2873,{"fn":577,"file":608,"line":636,"context":583},2874,{"fn":577,"file":608,"line":638,"context":585},2897,{"fn":577,"file":608,"line":640,"context":583},2899,{"fn":642,"file":608,"line":643,"context":644},"shell_exec",2934,"$output = shell_exec($command);",{"fn":577,"file":608,"line":646,"context":585},3938,{"fn":577,"file":608,"line":648,"context":585},3960,{"fn":577,"file":608,"line":650,"context":585},4027,{"fn":577,"file":608,"line":652,"context":592},4043,{"fn":555,"file":608,"line":654,"context":655},4613,"$premiumLev = unserialize( $options['premiumLevels'], array( 'allowed_classes' => false ) );",{"fn":577,"file":311,"line":657,"context":585},1284,{"fn":577,"file":311,"line":659,"context":585},1331,{"fn":577,"file":311,"line":661,"context":583},1332,{"fn":577,"file":311,"line":663,"context":585},1355,{"fn":577,"file":311,"line":665,"context":585},1395,{"fn":577,"file":311,"line":667,"context":668},1423,"if ( $options['enable_exec'] ) exec( 'echo ' . escapeshellarg(\"$stream|$stream_hls|$stream_webrtc|$t",{"fn":577,"file":311,"line":670,"context":671},1424,"if ( $options['enable_exec'] ) exec( 'echo ' . escapeshellarg($info) . ' >> ' . escapeshellarg($log_",{"fn":577,"file":311,"line":673,"context":585},1437,{"fn":577,"file":311,"line":675,"context":583},1438,{"fn":577,"file":311,"line":677,"context":678},1442,"if ( $options['enable_exec'] ) exec( 'echo ' . escapeshellarg('Stream incomplete. Will check again l",{"fn":577,"file":311,"line":680,"context":585},1569,{"fn":577,"file":311,"line":682,"context":683},1619,"if ( $options['enable_exec'] ) exec( $cmd, $output, $returnvalue  );",{"fn":577,"file":311,"line":685,"context":686},1654,"if ( $options['enable_exec'] ) exec( 'echo ' . escapeshellarg(\"$stream|$stream_hls|$transcodeEnabled",{"fn":577,"file":311,"line":688,"context":671},1656,{"fn":577,"file":311,"line":690,"context":583},1658,{"fn":577,"file":311,"line":692,"context":693},1713,"if ( $options['enable_exec'] ) exec( 'echo ' . escapeshellarg( date( DATE_RFC2822 ) . \"|$convert|$tr",{"fn":577,"file":311,"line":695,"context":585},1714,{"fn":577,"file":311,"line":697,"context":678},1731,{"fn":555,"file":311,"line":699,"context":700},3188,"$meta = unserialize( $chatRow->meta, array( 'allowed_classes' => false ) );",{"fn":555,"file":311,"line":702,"context":703},3296,"return unserialize( file_get_contents( $path ), array( 'allowed_classes' => false ) );",{"fn":577,"file":311,"line":705,"context":585},5422,{"fn":577,"file":311,"line":707,"context":592},5438,{"fn":577,"file":311,"line":709,"context":710},6034,"exec( \"ps aux | grep '[f]fmpeg' | grep -c 'vframes' 2>\u002Fdev\u002Fnull\", $output, $returnvalue );",{"fn":577,"file":311,"line":712,"context":585},6171,{"fn":577,"file":311,"line":714,"context":715},6172,"if ( $options['enable_exec'] ) exec( 'echo ' . escapeshellarg('Command: ' . $cmd . ' Return: ' . $re",{"fn":555,"file":311,"line":717,"context":655},6259,{"fn":555,"file":311,"line":719,"context":655},6276,{"fn":555,"file":311,"line":721,"context":722},6624,"$rtpsessions = unserialize( $rtpsessiondata, array( 'allowed_classes' => false ) );",{"fn":555,"file":311,"line":724,"context":725},6919,"$users = unserialize( $userdata, array( 'allowed_classes' => false ) );",{"fn":555,"file":311,"line":727,"context":558},7012,{"prepared":729,"raw":730,"locations":731},214,3,[732,735,738],{"file":311,"line":733,"context":734},471,"$wpdb->get_var() with variable interpolation",{"file":311,"line":736,"context":737},3844,"$wpdb->get_results() with variable interpolation",{"file":311,"line":739,"context":737},5474,{"escaped":741,"rawEcho":529,"locations":742},1434,[743,746,748,750,752,754,756,758,760,762,764,766,768,770,772,774,776,778,780,781,783,784,786,788,790,792,794,796,798,800,802,804,806,808,810,812,814,816,818,820,822,824,826,828,830,832,834,836,838,840,842,844,846,848,850,852,854,856,858,860,862,864,866,868,870,872,874,876,878,881,884,886,888,890,892,894,896,898,900,902,904,906,908,910,912,914,916,918,920,922,924,926,928,929,930,931,933,936,938,939,940,942,944,946,948,950,952,954,956,958,960,962,964,966,968,970,972,974,976,978,980,982,984,986,988,990],{"file":744,"line":336,"context":745},"bp.php","raw output",{"file":744,"line":747,"context":745},112,{"file":744,"line":749,"context":745},145,{"file":556,"line":751,"context":745},35,{"file":556,"line":753,"context":745},226,{"file":556,"line":755,"context":745},246,{"file":556,"line":757,"context":745},251,{"file":556,"line":759,"context":745},274,{"file":556,"line":761,"context":745},283,{"file":556,"line":763,"context":745},926,{"file":556,"line":765,"context":745},2917,{"file":578,"line":767,"context":745},686,{"file":608,"line":769,"context":745},201,{"file":608,"line":771,"context":745},1608,{"file":608,"line":773,"context":745},1926,{"file":608,"line":775,"context":745},1927,{"file":608,"line":777,"context":745},2075,{"file":608,"line":779,"context":745},2078,{"file":608,"line":779,"context":745},{"file":608,"line":782,"context":745},2086,{"file":608,"line":782,"context":745},{"file":608,"line":785,"context":745},2251,{"file":608,"line":787,"context":745},2433,{"file":608,"line":789,"context":745},2451,{"file":608,"line":791,"context":745},2469,{"file":608,"line":793,"context":745},2487,{"file":608,"line":795,"context":745},2505,{"file":608,"line":797,"context":745},2531,{"file":608,"line":799,"context":745},2622,{"file":608,"line":801,"context":745},2691,{"file":608,"line":803,"context":745},2789,{"file":608,"line":805,"context":745},2825,{"file":608,"line":807,"context":745},3061,{"file":608,"line":809,"context":745},3065,{"file":608,"line":811,"context":745},3067,{"file":608,"line":813,"context":745},3069,{"file":608,"line":815,"context":745},3114,{"file":608,"line":817,"context":745},3125,{"file":608,"line":819,"context":745},3152,{"file":608,"line":821,"context":745},3240,{"file":608,"line":823,"context":745},3650,{"file":608,"line":825,"context":745},3957,{"file":608,"line":827,"context":745},4047,{"file":608,"line":829,"context":745},4260,{"file":608,"line":831,"context":745},4493,{"file":608,"line":833,"context":745},4514,{"file":608,"line":835,"context":745},4515,{"file":608,"line":837,"context":745},5220,{"file":608,"line":839,"context":745},5363,{"file":608,"line":841,"context":745},5374,{"file":608,"line":843,"context":745},5376,{"file":608,"line":845,"context":745},5487,{"file":608,"line":847,"context":745},5493,{"file":608,"line":849,"context":745},5668,{"file":608,"line":851,"context":745},5670,{"file":608,"line":853,"context":745},5779,{"file":608,"line":855,"context":745},5804,{"file":608,"line":857,"context":745},5918,{"file":608,"line":859,"context":745},5957,{"file":608,"line":861,"context":745},6015,{"file":608,"line":863,"context":745},6039,{"file":608,"line":865,"context":745},6062,{"file":608,"line":867,"context":745},6084,{"file":608,"line":869,"context":745},6141,{"file":608,"line":871,"context":745},6145,{"file":608,"line":873,"context":745},6148,{"file":297,"line":875,"context":745},205,{"file":297,"line":877,"context":745},234,{"file":879,"line":880,"context":745},"inc\\restream.php",904,{"file":882,"line":883,"context":745},"inc\\shortcodes.php",2133,{"file":882,"line":885,"context":745},2134,{"file":882,"line":887,"context":745},2138,{"file":882,"line":889,"context":745},2139,{"file":882,"line":891,"context":745},2141,{"file":882,"line":893,"context":745},2143,{"file":882,"line":895,"context":745},2145,{"file":882,"line":897,"context":745},2147,{"file":882,"line":899,"context":745},2150,{"file":882,"line":901,"context":745},2151,{"file":882,"line":903,"context":745},2152,{"file":882,"line":905,"context":745},2156,{"file":882,"line":907,"context":745},2167,{"file":882,"line":909,"context":745},2171,{"file":882,"line":911,"context":745},2175,{"file":882,"line":913,"context":745},2358,{"file":882,"line":915,"context":745},2365,{"file":882,"line":917,"context":745},2374,{"file":882,"line":919,"context":745},2378,{"file":882,"line":921,"context":745},2424,{"file":882,"line":923,"context":745},2434,{"file":882,"line":925,"context":745},2438,{"file":302,"line":927,"context":745},68,{"file":302,"line":496,"context":745},{"file":302,"line":505,"context":745},{"file":302,"line":532,"context":745},{"file":302,"line":932,"context":745},206,{"file":934,"line":935,"context":745},"server\\translate.php",59,{"file":934,"line":937,"context":745},87,{"file":934,"line":505,"context":745},{"file":934,"line":420,"context":745},{"file":311,"line":941,"context":745},1002,{"file":311,"line":943,"context":745},3237,{"file":311,"line":945,"context":745},3273,{"file":311,"line":947,"context":745},3504,{"file":311,"line":949,"context":745},3557,{"file":311,"line":951,"context":745},3628,{"file":311,"line":953,"context":745},3658,{"file":311,"line":955,"context":745},3722,{"file":311,"line":957,"context":745},3785,{"file":311,"line":959,"context":745},3808,{"file":311,"line":961,"context":745},3882,{"file":311,"line":963,"context":745},3884,{"file":311,"line":965,"context":745},4382,{"file":311,"line":967,"context":745},4442,{"file":311,"line":969,"context":745},4782,{"file":311,"line":971,"context":745},4897,{"file":311,"line":973,"context":745},4915,{"file":311,"line":975,"context":745},4958,{"file":311,"line":977,"context":745},5386,{"file":311,"line":979,"context":745},5525,{"file":311,"line":981,"context":745},5550,{"file":311,"line":983,"context":745},5570,{"file":311,"line":985,"context":745},5600,{"file":311,"line":987,"context":745},5607,{"file":311,"line":989,"context":745},5711,{"file":311,"line":991,"context":745},7230,6,34,[],[996,1012,1050,1067,1166,1189,1243,1253,1265,1297,1333,1344,1431,1441,1469,1508,1516,1527,1535,1545,1555,1564,1572,1580,1589,1608,1622],{"entryPoint":997,"graph":998,"unsanitizedCount":90,"severity":41},"\u003Ctranslate> (server\\translate.php:0)",{"nodes":999,"edges":1010},[1000,1005],{"id":1001,"type":1002,"label":1003,"file":934,"line":1004},"n0","source","$_SERVER",23,{"id":1006,"type":1007,"label":1008,"file":934,"line":579,"wp_function":1009},"n1","sink","header() [Header Injection]","header",[1011],{"from":1001,"to":1006,"sanitized":390},{"entryPoint":1013,"graph":1014,"unsanitizedCount":29,"severity":1049},"vwls_stream_setup (inc\\iptv.php:693)",{"nodes":1015,"edges":1044},[1016,1019,1021,1025,1030,1032,1037,1039],{"id":1001,"type":1002,"label":1017,"file":578,"line":1018},"$_GET (x4)",724,{"id":1006,"type":1007,"label":1020,"file":578,"line":600,"wp_function":577},"exec() [RCE]",{"id":1022,"type":1002,"label":1023,"file":578,"line":1024},"n2","$_GET",725,{"id":1026,"type":1007,"label":1027,"file":578,"line":1028,"wp_function":1029},"n3","get_var() [SQLi]",969,"get_var",{"id":1031,"type":1002,"label":1023,"file":578,"line":1024},"n4",{"id":1033,"type":1007,"label":1034,"file":578,"line":1035,"wp_function":1036},"n5","get_row() [SQLi]",990,"get_row",{"id":1038,"type":1002,"label":1023,"file":578,"line":1024},"n6",{"id":1040,"type":1007,"label":1041,"file":578,"line":1042,"wp_function":1043},"n7","fopen() [File Access]",1058,"fopen",[1045,1046,1047,1048],{"from":1001,"to":1006,"sanitized":391},{"from":1022,"to":1026,"sanitized":391},{"from":1031,"to":1033,"sanitized":391},{"from":1038,"to":1040,"sanitized":391},"low",{"entryPoint":1051,"graph":1052,"unsanitizedCount":29,"severity":1049},"\u003Ciptv> (inc\\iptv.php:0)",{"nodes":1053,"edges":1062},[1054,1055,1056,1057,1058,1059,1060,1061],{"id":1001,"type":1002,"label":1017,"file":578,"line":1018},{"id":1006,"type":1007,"label":1020,"file":578,"line":600,"wp_function":577},{"id":1022,"type":1002,"label":1023,"file":578,"line":1024},{"id":1026,"type":1007,"label":1027,"file":578,"line":1028,"wp_function":1029},{"id":1031,"type":1002,"label":1023,"file":578,"line":1024},{"id":1033,"type":1007,"label":1034,"file":578,"line":1035,"wp_function":1036},{"id":1038,"type":1002,"label":1023,"file":578,"line":1024},{"id":1040,"type":1007,"label":1041,"file":578,"line":1042,"wp_function":1043},[1063,1064,1065,1066],{"from":1001,"to":1006,"sanitized":391},{"from":1022,"to":1026,"sanitized":391},{"from":1031,"to":1033,"sanitized":391},{"from":1038,"to":1040,"sanitized":391},{"entryPoint":1068,"graph":1069,"unsanitizedCount":29,"severity":1049},"settingsPage (inc\\options.php:1332)",{"nodes":1070,"edges":1151},[1071,1073,1076,1079,1081,1082,1086,1089,1090,1094,1096,1100,1102,1106,1108,1112,1114,1118,1120,1124,1126,1130,1133,1136,1141,1144,1146,1148],{"id":1001,"type":1002,"label":1072,"file":608,"line":771},"$_SERVER['REQUEST_URI']",{"id":1006,"type":1007,"label":1074,"file":608,"line":771,"wp_function":1075},"echo() [XSS]","echo",{"id":1022,"type":1002,"label":1077,"file":608,"line":1078},"$_POST",1951,{"id":1026,"type":1007,"label":1074,"file":608,"line":1080,"wp_function":1075},1954,{"id":1031,"type":1002,"label":1077,"file":608,"line":1078},{"id":1033,"type":1007,"label":1083,"file":608,"line":1084,"wp_function":1085},"wp_remote_get() [SSRF]",1957,"wp_remote_get",{"id":1038,"type":1002,"label":1087,"file":608,"line":1088},"$_SERVER['SERVER_NAME']",2275,{"id":1040,"type":1007,"label":1074,"file":608,"line":1088,"wp_function":1075},{"id":1091,"type":1002,"label":1092,"file":608,"line":1093},"n8","$_SERVER['SERVER_ADDR']",2276,{"id":1095,"type":1007,"label":1074,"file":608,"line":1093,"wp_function":1075},"n9",{"id":1097,"type":1002,"label":1098,"file":608,"line":1099},"n10","$_SERVER['DOCUMENT_ROOT'] (x2)",2277,{"id":1101,"type":1007,"label":1074,"file":608,"line":1099,"wp_function":1075},"n11",{"id":1103,"type":1002,"label":1104,"file":608,"line":1105},"n12","$_SERVER['SERVER_SOFTWARE']",2280,{"id":1107,"type":1007,"label":1074,"file":608,"line":1105,"wp_function":1075},"n13",{"id":1109,"type":1002,"label":1110,"file":608,"line":1111},"n14","$_SERVER['HTTP_CONNECTION']",2281,{"id":1113,"type":1007,"label":1074,"file":608,"line":1111,"wp_function":1075},"n15",{"id":1115,"type":1002,"label":1116,"file":608,"line":1117},"n16","$_SERVER['REMOTE_ADDR']",2282,{"id":1119,"type":1007,"label":1074,"file":608,"line":1117,"wp_function":1075},"n17",{"id":1121,"type":1002,"label":1122,"file":608,"line":1123},"n18","$_SERVER['HTTP_USER_AGENT']",2283,{"id":1125,"type":1007,"label":1074,"file":608,"line":1123,"wp_function":1075},"n19",{"id":1127,"type":1002,"label":1128,"file":608,"line":1129},"n20","$_GET (x20)",2773,{"id":1131,"type":1007,"label":1074,"file":608,"line":1132,"wp_function":1075},"n21",2780,{"id":1134,"type":1002,"label":1023,"file":608,"line":1135},"n22",2805,{"id":1137,"type":1007,"label":1138,"file":608,"line":1139,"wp_function":1140},"n23","file_get_contents() [SSRF\u002FLFI]",2819,"file_get_contents",{"id":1142,"type":1002,"label":1143,"file":608,"line":1135},"n24","$_GET (x10)",{"id":1145,"type":1007,"label":1020,"file":608,"line":634,"wp_function":577},"n25",{"id":1147,"type":1002,"label":1023,"file":608,"line":1135},"n26",{"id":1149,"type":1007,"label":1150,"file":608,"line":643,"wp_function":642},"n27","shell_exec() [RCE]",[1152,1153,1154,1155,1156,1157,1158,1159,1160,1161,1162,1163,1164,1165],{"from":1001,"to":1006,"sanitized":391},{"from":1022,"to":1026,"sanitized":391},{"from":1031,"to":1033,"sanitized":391},{"from":1038,"to":1040,"sanitized":391},{"from":1091,"to":1095,"sanitized":391},{"from":1097,"to":1101,"sanitized":391},{"from":1103,"to":1107,"sanitized":391},{"from":1109,"to":1113,"sanitized":391},{"from":1115,"to":1119,"sanitized":391},{"from":1121,"to":1125,"sanitized":391},{"from":1127,"to":1131,"sanitized":391},{"from":1134,"to":1137,"sanitized":391},{"from":1142,"to":1145,"sanitized":391},{"from":1147,"to":1149,"sanitized":391},{"entryPoint":1167,"graph":1168,"unsanitizedCount":29,"severity":1049},"adminRestream (inc\\options.php:5109)",{"nodes":1169,"edges":1185},[1170,1173,1175,1178,1180,1183],{"id":1001,"type":1002,"label":1171,"file":608,"line":1172},"$_POST (x3)",5194,{"id":1006,"type":1007,"label":1074,"file":608,"line":1174,"wp_function":1075},5202,{"id":1022,"type":1002,"label":1176,"file":608,"line":1177},"$_GET (x6)",5261,{"id":1026,"type":1007,"label":1074,"file":608,"line":1179,"wp_function":1075},5262,{"id":1031,"type":1002,"label":1181,"file":608,"line":1182},"$_SERVER (x2)",5454,{"id":1033,"type":1007,"label":1074,"file":608,"line":1184,"wp_function":1075},5456,[1186,1187,1188],{"from":1001,"to":1006,"sanitized":391},{"from":1022,"to":1026,"sanitized":391},{"from":1031,"to":1033,"sanitized":391},{"entryPoint":1190,"graph":1191,"unsanitizedCount":29,"severity":1049},"\u003Coptions> (inc\\options.php:0)",{"nodes":1192,"edges":1227},[1193,1194,1195,1197,1198,1199,1200,1201,1202,1203,1204,1205,1206,1207,1208,1209,1210,1211,1212,1213,1214,1216,1217,1218,1219,1220,1221,1222,1223,1225],{"id":1001,"type":1002,"label":1072,"file":608,"line":771},{"id":1006,"type":1007,"label":1074,"file":608,"line":771,"wp_function":1075},{"id":1022,"type":1002,"label":1196,"file":608,"line":1078},"$_POST (x4)",{"id":1026,"type":1007,"label":1074,"file":608,"line":1080,"wp_function":1075},{"id":1031,"type":1002,"label":1077,"file":608,"line":1078},{"id":1033,"type":1007,"label":1083,"file":608,"line":1084,"wp_function":1085},{"id":1038,"type":1002,"label":1087,"file":608,"line":1088},{"id":1040,"type":1007,"label":1074,"file":608,"line":1088,"wp_function":1075},{"id":1091,"type":1002,"label":1092,"file":608,"line":1093},{"id":1095,"type":1007,"label":1074,"file":608,"line":1093,"wp_function":1075},{"id":1097,"type":1002,"label":1098,"file":608,"line":1099},{"id":1101,"type":1007,"label":1074,"file":608,"line":1099,"wp_function":1075},{"id":1103,"type":1002,"label":1104,"file":608,"line":1105},{"id":1107,"type":1007,"label":1074,"file":608,"line":1105,"wp_function":1075},{"id":1109,"type":1002,"label":1110,"file":608,"line":1111},{"id":1113,"type":1007,"label":1074,"file":608,"line":1111,"wp_function":1075},{"id":1115,"type":1002,"label":1116,"file":608,"line":1117},{"id":1119,"type":1007,"label":1074,"file":608,"line":1117,"wp_function":1075},{"id":1121,"type":1002,"label":1122,"file":608,"line":1123},{"id":1125,"type":1007,"label":1074,"file":608,"line":1123,"wp_function":1075},{"id":1127,"type":1002,"label":1215,"file":608,"line":1129},"$_GET (x26)",{"id":1131,"type":1007,"label":1074,"file":608,"line":1132,"wp_function":1075},{"id":1134,"type":1002,"label":1023,"file":608,"line":1135},{"id":1137,"type":1007,"label":1138,"file":608,"line":1139,"wp_function":1140},{"id":1142,"type":1002,"label":1143,"file":608,"line":1135},{"id":1145,"type":1007,"label":1020,"file":608,"line":634,"wp_function":577},{"id":1147,"type":1002,"label":1023,"file":608,"line":1135},{"id":1149,"type":1007,"label":1150,"file":608,"line":643,"wp_function":642},{"id":1224,"type":1002,"label":1181,"file":608,"line":1182},"n28",{"id":1226,"type":1007,"label":1074,"file":608,"line":1184,"wp_function":1075},"n29",[1228,1229,1230,1231,1232,1233,1234,1235,1236,1237,1238,1239,1240,1241,1242],{"from":1001,"to":1006,"sanitized":391},{"from":1022,"to":1026,"sanitized":391},{"from":1031,"to":1033,"sanitized":391},{"from":1038,"to":1040,"sanitized":391},{"from":1091,"to":1095,"sanitized":391},{"from":1097,"to":1101,"sanitized":391},{"from":1103,"to":1107,"sanitized":391},{"from":1109,"to":1113,"sanitized":391},{"from":1115,"to":1119,"sanitized":391},{"from":1121,"to":1125,"sanitized":391},{"from":1127,"to":1131,"sanitized":391},{"from":1134,"to":1137,"sanitized":391},{"from":1142,"to":1145,"sanitized":391},{"from":1147,"to":1149,"sanitized":391},{"from":1224,"to":1226,"sanitized":391},{"entryPoint":1244,"graph":1245,"unsanitizedCount":29,"severity":1049},"vwls_pause_restream_stream (inc\\restream.php:586)",{"nodes":1246,"edges":1251},[1247,1249],{"id":1001,"type":1002,"label":1077,"file":879,"line":1248},600,{"id":1006,"type":1007,"label":1083,"file":879,"line":1250,"wp_function":1085},642,[1252],{"from":1001,"to":1006,"sanitized":391},{"entryPoint":1254,"graph":1255,"unsanitizedCount":29,"severity":1049},"\u003Crestream> (inc\\restream.php:0)",{"nodes":1256,"edges":1262},[1257,1258,1260,1261],{"id":1001,"type":1002,"label":1023,"file":879,"line":935},{"id":1006,"type":1007,"label":1027,"file":879,"line":1259,"wp_function":1029},90,{"id":1022,"type":1002,"label":1077,"file":879,"line":1248},{"id":1026,"type":1007,"label":1083,"file":879,"line":1250,"wp_function":1085},[1263,1264],{"from":1001,"to":1006,"sanitized":391},{"from":1022,"to":1026,"sanitized":391},{"entryPoint":1266,"graph":1267,"unsanitizedCount":29,"severity":1049},"videowhisper_channel_manage (inc\\shortcodes.php:139)",{"nodes":1268,"edges":1291},[1269,1272,1274,1276,1278,1280,1282,1284,1286,1287],{"id":1001,"type":1002,"label":1270,"file":882,"line":1271},"$_FILES",359,{"id":1006,"type":1007,"label":1138,"file":882,"line":1273,"wp_function":1140},383,{"id":1022,"type":1002,"label":1077,"file":882,"line":1275},287,{"id":1026,"type":1007,"label":1041,"file":882,"line":1277,"wp_function":1043},533,{"id":1031,"type":1002,"label":1077,"file":882,"line":1279},815,{"id":1033,"type":1007,"label":1027,"file":882,"line":1281,"wp_function":1029},826,{"id":1038,"type":1002,"label":1023,"file":882,"line":1283},888,{"id":1040,"type":1007,"label":1034,"file":882,"line":1285,"wp_function":1036},1162,{"id":1091,"type":1002,"label":1023,"file":882,"line":1283},{"id":1095,"type":1007,"label":1288,"file":882,"line":1289,"wp_function":1290},"query() [SQLi]",1181,"query",[1292,1293,1294,1295,1296],{"from":1001,"to":1006,"sanitized":391},{"from":1022,"to":1026,"sanitized":391},{"from":1031,"to":1033,"sanitized":391},{"from":1038,"to":1040,"sanitized":391},{"from":1091,"to":1095,"sanitized":391},{"entryPoint":1298,"graph":1299,"unsanitizedCount":29,"severity":1049},"\u003Cshortcodes> (inc\\shortcodes.php:0)",{"nodes":1300,"edges":1324},[1301,1302,1303,1304,1305,1306,1307,1308,1309,1310,1311,1313,1314,1316,1320,1322],{"id":1001,"type":1002,"label":1270,"file":882,"line":1271},{"id":1006,"type":1007,"label":1138,"file":882,"line":1273,"wp_function":1140},{"id":1022,"type":1002,"label":1077,"file":882,"line":1275},{"id":1026,"type":1007,"label":1041,"file":882,"line":1277,"wp_function":1043},{"id":1031,"type":1002,"label":1077,"file":882,"line":1279},{"id":1033,"type":1007,"label":1027,"file":882,"line":1281,"wp_function":1029},{"id":1038,"type":1002,"label":1023,"file":882,"line":1283},{"id":1040,"type":1007,"label":1034,"file":882,"line":1285,"wp_function":1036},{"id":1091,"type":1002,"label":1023,"file":882,"line":1283},{"id":1095,"type":1007,"label":1288,"file":882,"line":1289,"wp_function":1290},{"id":1097,"type":1002,"label":1143,"file":882,"line":1312},2066,{"id":1101,"type":1007,"label":1074,"file":882,"line":883,"wp_function":1075},{"id":1103,"type":1002,"label":1023,"file":882,"line":1315},2074,{"id":1107,"type":1007,"label":1317,"file":882,"line":1318,"wp_function":1319},"get_results() [SQLi]",2389,"get_results",{"id":1109,"type":1002,"label":1017,"file":882,"line":1321},2479,{"id":1113,"type":1007,"label":1027,"file":882,"line":1323,"wp_function":1029},2501,[1325,1326,1327,1328,1329,1330,1331,1332],{"from":1001,"to":1006,"sanitized":391},{"from":1022,"to":1026,"sanitized":391},{"from":1031,"to":1033,"sanitized":391},{"from":1038,"to":1040,"sanitized":391},{"from":1091,"to":1095,"sanitized":391},{"from":1097,"to":1101,"sanitized":391},{"from":1103,"to":1107,"sanitized":391},{"from":1109,"to":1113,"sanitized":391},{"entryPoint":1334,"graph":1335,"unsanitizedCount":29,"severity":1049},"nav_menus (videowhisper_streaming.php:4755)",{"nodes":1336,"edges":1342},[1337,1340],{"id":1001,"type":1002,"label":1338,"file":311,"line":1339},"$_REQUEST",4932,{"id":1006,"type":1007,"label":1074,"file":311,"line":1341,"wp_function":1075},4949,[1343],{"from":1001,"to":1006,"sanitized":391},{"entryPoint":1345,"graph":1346,"unsanitizedCount":29,"severity":1049},"\u003Cvideowhisper_streaming> (videowhisper_streaming.php:0)",{"nodes":1347,"edges":1414},[1348,1351,1353,1355,1356,1359,1361,1363,1365,1368,1370,1373,1375,1376,1380,1382,1384,1386,1387,1388,1392,1393,1394,1396,1398,1401,1403,1404,1405,1407,1409,1412],{"id":1001,"type":1002,"label":1349,"file":311,"line":1350},"$_GET (x12)",1101,{"id":1006,"type":1007,"label":1027,"file":311,"line":1352,"wp_function":1029},1120,{"id":1022,"type":1002,"label":1354,"file":311,"line":1350},"$_GET (x14)",{"id":1026,"type":1007,"label":1020,"file":311,"line":657,"wp_function":577},{"id":1031,"type":1002,"label":1357,"file":311,"line":1358},"$_GET (x11)",2407,{"id":1033,"type":1007,"label":1034,"file":311,"line":1360,"wp_function":1036},2681,{"id":1038,"type":1002,"label":1362,"file":311,"line":1358},"$_GET (x15)",{"id":1040,"type":1007,"label":1288,"file":311,"line":1364,"wp_function":1290},2696,{"id":1091,"type":1002,"label":1366,"file":311,"line":1367},"$_COOKIE (x6)",2859,{"id":1095,"type":1007,"label":1288,"file":311,"line":1369,"wp_function":1290},2928,{"id":1097,"type":1002,"label":1371,"file":311,"line":1372},"$_GET (x2)",2824,{"id":1101,"type":1007,"label":1317,"file":311,"line":1374,"wp_function":1319},3129,{"id":1103,"type":1002,"label":1023,"file":311,"line":1358},{"id":1107,"type":1007,"label":1377,"file":311,"line":1378,"wp_function":1379},"file_put_contents() [File Write]",3397,"file_put_contents",{"id":1109,"type":1002,"label":1349,"file":311,"line":1381},3430,{"id":1113,"type":1007,"label":1074,"file":311,"line":1383,"wp_function":1075},3858,{"id":1115,"type":1002,"label":1385,"file":311,"line":1367},"$_COOKIE (x4)",{"id":1119,"type":1007,"label":1074,"file":311,"line":961,"wp_function":1075},{"id":1121,"type":1002,"label":1023,"file":311,"line":1350},{"id":1125,"type":1007,"label":1389,"file":311,"line":1390,"wp_function":1391},"get_col() [SQLi]",4733,"get_col",{"id":1127,"type":1002,"label":1338,"file":311,"line":1339},{"id":1131,"type":1007,"label":1074,"file":311,"line":1341,"wp_function":1075},{"id":1134,"type":1002,"label":1395,"file":311,"line":1367},"$_COOKIE (x2)",{"id":1137,"type":1007,"label":1034,"file":311,"line":1397,"wp_function":1036},5956,{"id":1142,"type":1002,"label":1399,"file":311,"line":1400},"$_POST (x2)",6621,{"id":1145,"type":1007,"label":1402,"file":311,"line":721,"wp_function":555},"unserialize() [Object Injection]",{"id":1147,"type":1002,"label":1023,"file":311,"line":1381},{"id":1149,"type":1007,"label":1402,"file":311,"line":727,"wp_function":555},{"id":1224,"type":1002,"label":1077,"file":311,"line":1406},7227,{"id":1226,"type":1007,"label":1377,"file":311,"line":1408,"wp_function":1379},7228,{"id":1410,"type":1002,"label":1077,"file":311,"line":1411},"n30",6916,{"id":1413,"type":1007,"label":1074,"file":311,"line":991,"wp_function":1075},"n31",[1415,1416,1417,1418,1419,1420,1421,1422,1423,1424,1425,1426,1427,1428,1429,1430],{"from":1001,"to":1006,"sanitized":391},{"from":1022,"to":1026,"sanitized":391},{"from":1031,"to":1033,"sanitized":391},{"from":1038,"to":1040,"sanitized":391},{"from":1091,"to":1095,"sanitized":391},{"from":1097,"to":1101,"sanitized":391},{"from":1103,"to":1107,"sanitized":391},{"from":1109,"to":1113,"sanitized":391},{"from":1115,"to":1119,"sanitized":391},{"from":1121,"to":1125,"sanitized":391},{"from":1127,"to":1131,"sanitized":391},{"from":1134,"to":1137,"sanitized":391},{"from":1142,"to":1145,"sanitized":391},{"from":1147,"to":1149,"sanitized":391},{"from":1224,"to":1226,"sanitized":391},{"from":1410,"to":1413,"sanitized":391},{"entryPoint":1432,"graph":1433,"unsanitizedCount":90,"severity":70},"vwls_stream (inc\\h5videochat.php:231)",{"nodes":1434,"edges":1439},[1435,1437],{"id":1001,"type":1002,"label":1077,"file":556,"line":1436},243,{"id":1006,"type":1007,"label":1027,"file":556,"line":1438,"wp_function":1029},257,[1440],{"from":1001,"to":1006,"sanitized":390},{"entryPoint":1442,"graph":1443,"unsanitizedCount":1468,"severity":70},"h5vls_app (inc\\h5videochat.php:1264)",{"nodes":1444,"edges":1462},[1445,1447,1449,1451,1452,1454,1456,1457,1459,1460],{"id":1001,"type":1002,"label":1171,"file":556,"line":1446},1306,{"id":1006,"type":1007,"label":1034,"file":556,"line":1448,"wp_function":1036},1354,{"id":1022,"type":1002,"label":1450,"file":556,"line":1446},"$_POST (x5)",{"id":1026,"type":1007,"label":1402,"file":556,"line":560,"wp_function":555},{"id":1031,"type":1002,"label":1453,"file":556,"line":1446},"$_POST (x6)",{"id":1033,"type":1007,"label":1288,"file":556,"line":1455,"wp_function":1290},1760,{"id":1038,"type":1002,"label":1196,"file":556,"line":1446},{"id":1040,"type":1007,"label":1377,"file":556,"line":1458,"wp_function":1379},2132,{"id":1091,"type":1002,"label":1077,"file":556,"line":1446},{"id":1095,"type":1007,"label":1317,"file":556,"line":1461,"wp_function":1319},2768,[1463,1464,1465,1466,1467],{"from":1001,"to":1006,"sanitized":391},{"from":1022,"to":1026,"sanitized":390},{"from":1031,"to":1033,"sanitized":391},{"from":1038,"to":1040,"sanitized":390},{"from":1091,"to":1095,"sanitized":391},9,{"entryPoint":1470,"graph":1471,"unsanitizedCount":1507,"severity":70},"\u003Ch5videochat> (inc\\h5videochat.php:0)",{"nodes":1472,"edges":1497},[1473,1474,1475,1477,1479,1481,1483,1484,1485,1486,1487,1489,1490,1491,1492,1493,1494,1495],{"id":1001,"type":1002,"label":1077,"file":556,"line":1436},{"id":1006,"type":1007,"label":1027,"file":556,"line":1438,"wp_function":1029},{"id":1022,"type":1002,"label":1023,"file":556,"line":1476},490,{"id":1026,"type":1007,"label":1027,"file":556,"line":1478,"wp_function":1029},532,{"id":1031,"type":1002,"label":1480,"file":556,"line":1248},"$_COOKIE",{"id":1033,"type":1007,"label":1034,"file":556,"line":1482,"wp_function":1036},901,{"id":1038,"type":1002,"label":1171,"file":556,"line":1446},{"id":1040,"type":1007,"label":1034,"file":556,"line":1448,"wp_function":1036},{"id":1091,"type":1002,"label":1450,"file":556,"line":1446},{"id":1095,"type":1007,"label":1402,"file":556,"line":560,"wp_function":555},{"id":1097,"type":1002,"label":1488,"file":556,"line":1446},"$_POST (x8)",{"id":1101,"type":1007,"label":1288,"file":556,"line":1455,"wp_function":1290},{"id":1103,"type":1002,"label":1196,"file":556,"line":1446},{"id":1107,"type":1007,"label":1377,"file":556,"line":1458,"wp_function":1379},{"id":1109,"type":1002,"label":1399,"file":556,"line":1446},{"id":1113,"type":1007,"label":1317,"file":556,"line":1461,"wp_function":1319},{"id":1115,"type":1002,"label":1399,"file":556,"line":1446},{"id":1119,"type":1007,"label":1027,"file":556,"line":1496,"wp_function":1029},3542,[1498,1499,1500,1501,1502,1503,1504,1505,1506],{"from":1001,"to":1006,"sanitized":390},{"from":1022,"to":1026,"sanitized":390},{"from":1031,"to":1033,"sanitized":391},{"from":1038,"to":1040,"sanitized":391},{"from":1091,"to":1095,"sanitized":390},{"from":1097,"to":1101,"sanitized":391},{"from":1103,"to":1107,"sanitized":390},{"from":1109,"to":1113,"sanitized":391},{"from":1115,"to":1119,"sanitized":391},11,{"entryPoint":1509,"graph":1510,"unsanitizedCount":90,"severity":70},"videowhisper_restream_player (inc\\restream.php:15)",{"nodes":1511,"edges":1514},[1512,1513],{"id":1001,"type":1002,"label":1023,"file":879,"line":935},{"id":1006,"type":1007,"label":1027,"file":879,"line":1259,"wp_function":1029},[1515],{"from":1001,"to":1006,"sanitized":390},{"entryPoint":1517,"graph":1518,"unsanitizedCount":1507,"severity":70},"vwls_channels (inc\\shortcodes.php:2050)",{"nodes":1519,"edges":1524},[1520,1521,1522,1523],{"id":1001,"type":1002,"label":1143,"file":882,"line":1312},{"id":1006,"type":1007,"label":1074,"file":882,"line":883,"wp_function":1075},{"id":1022,"type":1002,"label":1023,"file":882,"line":1315},{"id":1026,"type":1007,"label":1317,"file":882,"line":1318,"wp_function":1319},[1525,1526],{"from":1001,"to":1006,"sanitized":390},{"from":1022,"to":1026,"sanitized":390},{"entryPoint":1528,"graph":1529,"unsanitizedCount":90,"severity":70},"videowhisper_hls (inc\\shortcodes.php:2448)",{"nodes":1530,"edges":1533},[1531,1532],{"id":1001,"type":1002,"label":1023,"file":882,"line":1321},{"id":1006,"type":1007,"label":1027,"file":882,"line":1323,"wp_function":1029},[1534],{"from":1001,"to":1006,"sanitized":390},{"entryPoint":1536,"graph":1537,"unsanitizedCount":90,"severity":70},"videowhisper_mpeg (inc\\shortcodes.php:2626)",{"nodes":1538,"edges":1543},[1539,1541],{"id":1001,"type":1002,"label":1023,"file":882,"line":1540},2659,{"id":1006,"type":1007,"label":1027,"file":882,"line":1542,"wp_function":1029},2677,[1544],{"from":1001,"to":1006,"sanitized":390},{"entryPoint":1546,"graph":1547,"unsanitizedCount":90,"severity":70},"videowhisper_video (inc\\shortcodes.php:2836)",{"nodes":1548,"edges":1553},[1549,1551],{"id":1001,"type":1002,"label":1023,"file":882,"line":1550},2867,{"id":1006,"type":1007,"label":1027,"file":882,"line":1552,"wp_function":1029},2894,[1554],{"from":1001,"to":1006,"sanitized":390},{"entryPoint":1556,"graph":1557,"unsanitizedCount":90,"severity":70},"webcamAppConfigAjax (inc\\webcamapp.php:52)",{"nodes":1558,"edges":1562},[1559,1561],{"id":1001,"type":1002,"label":1023,"file":302,"line":1560},73,{"id":1006,"type":1007,"label":1027,"file":302,"line":254,"wp_function":1029},[1563],{"from":1001,"to":1006,"sanitized":390},{"entryPoint":1565,"graph":1566,"unsanitizedCount":225,"severity":70},"\u003Cwebcamapp> (inc\\webcamapp.php:0)",{"nodes":1567,"edges":1570},[1568,1569],{"id":1001,"type":1002,"label":1371,"file":302,"line":1560},{"id":1006,"type":1007,"label":1027,"file":302,"line":254,"wp_function":1029},[1571],{"from":1001,"to":1006,"sanitized":390},{"entryPoint":1573,"graph":1574,"unsanitizedCount":90,"severity":70},"videowhisper_watch (videowhisper_streaming.php:1072)",{"nodes":1575,"edges":1578},[1576,1577],{"id":1001,"type":1002,"label":1023,"file":311,"line":1350},{"id":1006,"type":1007,"label":1027,"file":311,"line":1352,"wp_function":1029},[1579],{"from":1001,"to":1006,"sanitized":390},{"entryPoint":1581,"graph":1582,"unsanitizedCount":90,"severity":70},"videowhisper_broadcast (videowhisper_streaming.php:2358)",{"nodes":1583,"edges":1587},[1584,1585],{"id":1001,"type":1002,"label":1023,"file":311,"line":1358},{"id":1006,"type":1007,"label":1027,"file":311,"line":1586,"wp_function":1029},2425,[1588],{"from":1001,"to":1006,"sanitized":390},{"entryPoint":1590,"graph":1591,"unsanitizedCount":90,"severity":70},"wp_ajax_vwls_htmlchat (videowhisper_streaming.php:2813)",{"nodes":1592,"edges":1603},[1593,1594,1595,1597,1598,1599,1600,1601],{"id":1001,"type":1002,"label":1023,"file":311,"line":1372},{"id":1006,"type":1007,"label":1027,"file":311,"line":805,"wp_function":1029},{"id":1022,"type":1002,"label":1596,"file":311,"line":1367},"$_COOKIE (x3)",{"id":1026,"type":1007,"label":1288,"file":311,"line":1369,"wp_function":1290},{"id":1031,"type":1002,"label":1371,"file":311,"line":1372},{"id":1033,"type":1007,"label":1317,"file":311,"line":1374,"wp_function":1319},{"id":1038,"type":1002,"label":1023,"file":311,"line":1372},{"id":1040,"type":1007,"label":1288,"file":311,"line":1602,"wp_function":1290},3167,[1604,1605,1606,1607],{"from":1001,"to":1006,"sanitized":390},{"from":1022,"to":1026,"sanitized":391},{"from":1031,"to":1033,"sanitized":391},{"from":1038,"to":1040,"sanitized":391},{"entryPoint":1609,"graph":1610,"unsanitizedCount":90,"severity":70},"adminLive (videowhisper_streaming.php:5636)",{"nodes":1611,"edges":1619},[1612,1614,1616,1617],{"id":1001,"type":1002,"label":1023,"file":311,"line":1613},5639,{"id":1006,"type":1007,"label":1027,"file":311,"line":1615,"wp_function":1029},5648,{"id":1022,"type":1002,"label":1023,"file":311,"line":1613},{"id":1026,"type":1007,"label":1288,"file":311,"line":1618,"wp_function":1290},5659,[1620,1621],{"from":1001,"to":1006,"sanitized":390},{"from":1022,"to":1026,"sanitized":391},{"entryPoint":1623,"graph":1624,"unsanitizedCount":992,"severity":70},"vwls_calls (videowhisper_streaming.php:6548)",{"nodes":1625,"edges":1646},[1626,1627,1628,1629,1630,1631,1632,1634,1636,1637,1639,1640,1642,1644],{"id":1001,"type":1002,"label":1399,"file":311,"line":1400},{"id":1006,"type":1007,"label":1402,"file":311,"line":721,"wp_function":555},{"id":1022,"type":1002,"label":1077,"file":311,"line":1406},{"id":1026,"type":1007,"label":1377,"file":311,"line":1408,"wp_function":1379},{"id":1031,"type":1002,"label":1077,"file":311,"line":1411},{"id":1033,"type":1007,"label":1074,"file":311,"line":991,"wp_function":1075},{"id":1038,"type":1002,"label":1023,"file":311,"line":1633},7277,{"id":1040,"type":1007,"label":1027,"file":311,"line":1635,"wp_function":1029},7301,{"id":1091,"type":1002,"label":1023,"file":311,"line":1633},{"id":1095,"type":1007,"label":1288,"file":311,"line":1638,"wp_function":1290},7342,{"id":1097,"type":1002,"label":1023,"file":311,"line":1633},{"id":1101,"type":1007,"label":1074,"file":311,"line":1641,"wp_function":1075},7383,{"id":1103,"type":1002,"label":1023,"file":311,"line":1643},7268,{"id":1107,"type":1007,"label":1074,"file":311,"line":1645,"wp_function":1075},7386,[1647,1648,1649,1650,1651,1652,1653],{"from":1001,"to":1006,"sanitized":390},{"from":1022,"to":1026,"sanitized":390},{"from":1031,"to":1033,"sanitized":390},{"from":1038,"to":1040,"sanitized":390},{"from":1091,"to":1095,"sanitized":391},{"from":1097,"to":1101,"sanitized":390},{"from":1103,"to":1107,"sanitized":391},{"summary":1655,"deductions":1656},"The \"videowhisper-live-streaming-integration\" plugin exhibits a mixed security posture, with some positive aspects overshadowed by significant concerns. While a large majority of SQL queries are prepared and output escaping is generally good, the plugin suffers from a substantial attack surface with a high number of unprotected entry points, particularly AJAX handlers.  The presence of dangerous functions like `unserialize`, `exec`, and `shell_exec` in the codebase, coupled with a concerning number of taint flows with unsanitized paths (all rated high severity), indicates a high risk of code execution and path traversal vulnerabilities if these flows are exploitable.\n\nThe plugin's vulnerability history is a major red flag. With 12 known CVEs, including 4 critical and 2 high severity issues, and a recent vulnerability in May 2025, this plugin has a consistent track record of security flaws. The common types of past vulnerabilities (CSRF, Path Traversal, Input Validation, Sensitive Information Exposure, Unrestricted Upload, XSS) are directly related to the types of risks identified in the static analysis and taint analysis. This pattern suggests a recurring inability to properly sanitize and validate user input, and a lack of robust security checks at critical integration points. \n\nOverall, the plugin's strengths in prepared SQL and output escaping are heavily outweighed by the extensive unprotected attack surface, the presence of dangerous functions, and the alarming history of critical vulnerabilities. The high number of unsanitized taint flows is a particularly pressing concern that requires immediate attention. While there are no currently unpatched CVEs, the fundamental issues highlighted by the static analysis and historical data suggest a high likelihood of future exploitable vulnerabilities if not addressed comprehensively.",[1657,1659,1662,1665,1667,1669,1671,1673],{"reason":1658,"points":48},"High number of unprotected AJAX handlers",{"reason":1660,"points":1661},"Unprotected REST API route",5,{"reason":1663,"points":1664},"High severity taint flows with unsanitized paths",15,{"reason":1666,"points":1664},"Presence of dangerous functions (unserialize, exec, shell_exec)",{"reason":1668,"points":222},"History of 4 critical CVEs",{"reason":1670,"points":48},"History of 2 high CVEs",{"reason":1672,"points":48},"Recent vulnerability (May 2025)",{"reason":1674,"points":48},"Common vulnerability types indicate recurring issues","2026-03-16T19:34:28.418Z",{"wat":1677,"direct":1690},{"assetPaths":1678,"generatorPatterns":1683,"scriptPaths":1684,"versionParams":1685},[1679,1680,1681,1682],"\u002Fwp-content\u002Fplugins\u002Fvideowhisper-live-streaming-integration\u002Fcss\u002Fvw-admin-style.css","\u002Fwp-content\u002Fplugins\u002Fvideowhisper-live-streaming-integration\u002Fcss\u002Fvw-style.css","\u002Fwp-content\u002Fplugins\u002Fvideowhisper-live-streaming-integration\u002Fjs\u002Fvw-admin-script.js","\u002Fwp-content\u002Fplugins\u002Fvideowhisper-live-streaming-integration\u002Fjs\u002Fvw-script.js",[],[1681,1682],[1686,1687,1688,1689],"videowhisper-live-streaming-integration\u002Fcss\u002Fvw-admin-style.css?ver=","videowhisper-live-streaming-integration\u002Fcss\u002Fvw-style.css?ver=","videowhisper-live-streaming-integration\u002Fjs\u002Fvw-admin-script.js?ver=","videowhisper-live-streaming-integration\u002Fjs\u002Fvw-script.js?ver=",{"cssClasses":1691,"htmlComments":1693,"htmlAttributes":1696,"restEndpoints":1701,"jsGlobals":1702,"shortcodeOutput":1705},[1692],"vwls-admin-settings",[1694,1695],"\u003C!-- VideoWhisper Live Streaming -->","\u003C!-- Live Streaming Options -->",[1697,1698,1699,1700],"data-vwls-page-manage","data-vwls-page-channels","data-vwls-broadcast-id","data-vwls-broadcast-channel",[],[1703,1704],"vwls_admin_obj","vwls_vars",[1706,1707,1708],"[videowhisper_live_streaming]","[vwls_broadcast_room]","[vwls_channel_list]"]