WordPress security by component
Paid Videochat Turnkey Site
Plugin description
Paid Videochat Turnkey Site is a WordPress component with 7 published CVE records in this archive. The latest tracked vulnerability was published Jun 29, 2026; the highest CVE/CNA score is 9.9.
Plugin slug:
ppv-live-webcamsLatest vulnerability
CVE-2026-57331: Paid Videochat Turnkey Site: Arbitrary file deletion
Paid Videochat Turnkey Site is affected by arbitrary file deletion. Exposure depends on how the affected operation is made reachable by the site. A successful request can remove files outside the intended scope and may make the site unavailable. The published affected range is n/a through 7.4.8.
| Safe version |
|
||
|---|---|---|---|
| Jun 29, 2026 |
CVE-2026-57331
Paid Videochat Turnkey Site: Arbitrary file deletion
Paid Videochat Turnkey Site is affected by arbitrary file deletion. Exposure depends on how the affected operation is made reachable by the site. A successful request can remove files outside the intended scope and may make the site unavailable. The published affected range is n/a through 7.4.8.
|
7.4.9 |
CVE9.9
NVDPending
|
| Jun 15, 2026 |
CVE-2026-27333
Paid Videochat Turnkey Site: Code execution
Paid Videochat Turnkey Site is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is n/a through 7.3.23.
|
7.3.24 |
CVE8.1
NVDPending
|
| May 26, 2026 |
CVE-2026-24590
Paid Videochat Turnkey Site: A security weakness
Paid Videochat Turnkey Site is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 7.3.23.
|
7.3.24 |
CVE5.3
NVDPending
|
| Mar 07, 2026 |
CVE-2025-8899
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams: Privilege escalation or authentication bypass
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams is affected by privilege escalation or authentication bypass. Exploitation requires at least author-level access. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE8.8
NVDPending
|
| Oct 27, 2025 |
CVE-2025-62959
Paid Videochat Turnkey Site: Code execution
Paid Videochat Turnkey Site is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE9.1
NVDPending
|
| Apr 17, 2025 |
CVE-2025-31380
Paid Videochat Turnkey Site: A security weakness
Paid Videochat Turnkey Site is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Feb 18, 2025 |
CVE-2025-22663
Paid Videochat Turnkey Site: Filesystem traversal
Paid Videochat Turnkey Site is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE8.6
NVDPending
|