Live › vulnerability › CVE-2026-110883
Go to dashboardThe VideoWhisper 2Way VideoCalls and Random Chat WordPress plugin (webcam-2way-videochat) has an authentication bypass caused by a primary weakness, per the NVD description. Affected versions run from n/a through 6.1.5, and the sources do not say exactly what an attacker gains.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the VideoWhisper 2Way VideoCalls and Random Chat plugin at version 6.1.5 or lower are in scope. The sources do not describe the configuration or feature path that makes the bypass reachable, so unknown whether all installs are exposed.
No product ranges from the sources yet.
wp plugin get webcam-2way-videochat --field=version6.1.56.1.5; the sources do not name the fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5.
This page as .md · .json · in your agent: get_signal("CVE-2026-110883")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.