WordPress plugin
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium4
- Low0
All 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤6.1.9Update to 6.1.10 | CVE-2026-120857 | |
| Medium5.3 | Missing Authorization ≤6.1.5Update to 6.1.6 | CVE-2026-110883 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤5.2.7Update to 5.2.8 | CVE-2021-34656 | |
| Medium6.1 | Cross-Site Scripting ≤4.41Update to 4.41.2 | — |
- Medium5.3Missing Authorization
≤6.1.9Update to 6.1.10
- Medium5.3Missing Authorization
≤6.1.5Update to 6.1.6
- Medium6.1Reflected Cross-Site Scripting
≤5.2.7Update to 5.2.8
- Medium6.1Cross-Site Scripting
≤4.41Update to 4.41.2
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat: common questions
Does 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat: 4 medium. None are known to affect version null.
How do I check which version of 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat vulnerability?
CVE-2026-120857, published Nov 7, 2026: 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat <= 6.1.9 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat vulnerability listed in CISA KEV?
No. None of the known 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat vulnerabilities is currently listed in the CISA KEV catalog.
