---
id: CVE-2026-110883
title: >-
  WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken
  Authentication vulnerability
summary: >-
  Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com
  2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication
  Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through
  6.1.5.
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-305
vendor: VideoWhisper.com
product: webcam-2way-videochat
affected:
  - webcam-2way-videochat <= 6.1.5
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T11:00:29.126Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-110883'
references:
  - url: >-
      https://patchstack.com/database/wordpress/plugin/webcam-2way-videochat/vulnerability/wordpress-2way-videocalls-and-random-chat-plugin-6-1-5-broken-authentication-vulnerability?_s_id=cve
tags:
  - cve.org
ingestedAt: '2026-10-18T11:40:26.641Z'
---

## Overview

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5.

## Affected

- `webcam-2way-videochat <= 6.1.5`

## Remediation

Update the WordPress 2Way VideoCalls and Random Chat plugin to the latest available version (at least 6.1.6).