WordPress VideoWhisper Live Streaming Integration Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	65880
Class:	Design Error
CVE:	CVE-2014-1908
Remote:	Yes
Local:	No
Published:	Feb 27 2014 12:00AM
Updated:	Feb 27 2014 12:00AM
Credit:	High-Tech Bridge Security Research Lab
Vulnerable:	VideoWhisper VideoWhisper Live Streaming Integration 4.27.3
Not Vulnerable:	VideoWhisper VideoWhisper Live Streaming Integration 4.29.5

WordPress VideoWhisper Live Streaming Integration Multiple Information Disclosure Vulnerabilities

VideoWhisper Live Streaming Integration plugin for WordPress is prone to multiple information-disclosure vulnerabilities.

Successful exploits will allow unauthenticated attackers to obtain sensitive information, which may aid in further attacks.

VideoWhisper Live Streaming Integration 4.27.3 is vulnerable; other versions may also be affected.

WordPress VideoWhisper Live Streaming Integration Multiple Information Disclosure Vulnerabilities

Attackers can use a browser to exploit these issues.

WordPress VideoWhisper Live Streaming Integration Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

WordPress VideoWhisper Live Streaming Integration Multiple Information Disclosure Vulnerabilities

References:

• Multiple Vulnerabilities in VideoWhisper Live Streaming Integration WP Plugin (High-Tech Bridge SA)
  
• VideoWhisper Live Streaming Integration Homepage (WordPress)