Access Control Flaw in VideoWhisper Webcam Chat Solutions
CVE-2026-120857

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
2way Videocalls And Random Chat
Vendor
CVE Published:
7 November 2026

What is CVE-2026-120857?

The vulnerability in VideoWhisper's 2Way VideoCalls and Random Chat products arises from inadequate access control mechanisms, allowing unauthorized users to exploit incorrectly configured security levels. This lack of proper authorization can lead to sensitive data exposure and unauthorized actions within the application environment, affecting users who utilize versions through 6.1.9.

Affected Version(s)

2Way VideoCalls and Random Chat 0 <= 6.1.9

References

https://patchstack.com/database/wordpress/plugin/webcam-2...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Elieve | Patchstack Bug Bounty Program
.