CVE-2014-1905

no score yetEPSS 9.8%

Unrestricted file upload vulnerability in ls/vw_snapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, and then accessing the file via a direct request to a wp-content/plugins/videowhisper-live-streaming-integration/ls/snapshots/ pathname, as demonstrated by a .php.jpg filename.

EPSS: 9.8% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2014-12-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

videowhisper:videowhisper_live_streaming_integration

References

https://www.htbridge.com/advisory/HTB23199
https://www.htbridge.com/advisory/HTB23199

Check your stack JSON