CVE-2025-31380

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-31380
Weak Password Recovery Mechanism for Forgotten Password vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Password Recovery Exploitation.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.3.11.
CVSS

No CVSS.

References
Link Resource
https://patchstack.com/database/Wordpress/Plugin/ppv-live-webcams/vulnerability/wordpress-paid-videochat-turnkey-site-7-3-5-broken-authentication-vulnerability?_s_id=cve
Configurations

No configuration.

History

01 Apr 2026, 17:20

Type Values Removed Values Added
Summary
  • (es) Un mecanismo débil de recuperación de contraseñas para la vulnerabilidad de contraseña olvidada en videowhisper Paid Videochat Turnkey Site permite la explotación de la recuperación de contraseñas. Este problema afecta a Paid Videochat Turnkey Site desde n/d hasta la versión 7.3.11.
Summary (en) Weak Password Recovery Mechanism for Forgotten Password vulnerability in videowhisper Paid Videochat Turnkey Site allows Password Recovery Exploitation. This issue affects Paid Videochat Turnkey Site: from n/a through 7.3.11. (en) Weak Password Recovery Mechanism for Forgotten Password vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Password Recovery Exploitation.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.3.11.
References
  • {'url': 'https://patchstack.com/database/wordpress/plugin/ppv-live-webcams/vulnerability/wordpress-paid-videochat-turnkey-site-7-3-5-broken-authentication-vulnerability?_s_id=cve', 'source': 'audit@patchstack.com'}
  • () https://patchstack.com/database/Wordpress/Plugin/ppv-live-webcams/vulnerability/wordpress-paid-videochat-turnkey-site-7-3-5-broken-authentication-vulnerability?_s_id=cve -
CVSS v2 : unknown
v3 : 9.8 		v2 : unknown
v3 : unknown

17 Apr 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-17 16:15

Updated : 2026-04-01 17:20

NVD link : CVE-2025-31380

Mitre link : CVE-2025-31380

CVE.ORG link : CVE-2025-31380

JSON object : View

Products Affected

No product.

CWE
CWE-640

Weak Password Recovery Mechanism for Forgotten Password