CVE-2014-4567: Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webca...

Security readout for executives and security teams

This CVE affects an old WordPress plugin, Video Comments Webcam Recorder. A vulnerable logout-related PHP file accepted a message value that could be rendered as script or HTML. If present on a site, this could let an attacker run browser-side code in a visitor or administrator context. Exposure is likely limited to WordPress sites that installed Video Comments Webcam Recorder plugin 1.55 from a vulnerable pre-2014-01-16 package. Sites not using this plugin are not indicated as affected by the provided sources. Handle during normal vulnerability remediation unless the plugin is internet-exposed on a high-value WordPress site. No active exploitation is cited, but XSS in WordPress can become serious if administrator sessions or trusted visitors are targeted. Mitigation focus: Inventory WordPress sites for Video Comments Webcam Recorder plugin 1.55.; Disable or remove the plugin if it is unused.; Check vendor or WordPress plugin repository guidance before assuming a fixed version..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.