CVE-2026-27333
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Paid Videochat Turnkey Site versions up to 7.3.23 are vulnerable to unauthenticated deserialization of untrusted data.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious code, potentially leading to system takeover.
Recommendation
It is recommended to upgrade to the latest version of the software to mitigate this vulnerability.
Other vulnerabilities in Paid Videochat Turnkey Site
See all- CVE-2026-57331Critical
The Performer Arbitrary File Deletion vulnerability in Paid Videochat Turnkey Site versions up to 7.4.8 allows an attacker to delete arbitrary files on the server. This flaw can be exploited to remove critical system or application files.
- CVE-2026-24590Medium
The Paid Videochat Turnkey Site plugin for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control levels. Versions up to 7.3.23 are affected.
Original NVD description (English source)
Unauthenticated Deserialization of untrusted data in Paid Videochat Turnkey Site <= 7.3.23 versions.