{
 "id": "WPSEC-2026-2434",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2434/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2434/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2434/index.md",
 "title": "Video Comments Webcam Recorder <= 2.3.3 - Unauthenticated Path Traversal via Comment Recording References",
 "description": "The Webcam/Screen/Mic Recorder for Video Comments and Forms plugin for WordPress is vulnerable to Path Traversal via the 'recordings' comment field in all versions up to, and including, 2.3.3. This is due to the comment_post handler appending each comma-separated recording name directly to the user's recording directory path when the legacy HTML5 Videochat recorder mode is active, without sanitizing the name or checking that the path stays inside that directory. This makes it possible for unauthenticated attackers who can post comments to attach arbitrary server file paths to their comment's recording metadata, which reveals whether those files exist and how large they are, and makes the published comment link to them.",
 "plugin": {
  "slug": "video-comments-webcam-recorder",
  "name": "Video Comments Webcam Recorder",
  "full_name": "Webcam/Screen/Mic Recorder for Video Comments and Forms",
  "wordpress_org": "https://wordpress.org/plugins/video-comments-webcam-recorder/",
  "advisories_url": "https://wpsec.com/vuln/plugin/video-comments-webcam-recorder/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/video-comments-webcam-recorder"
 },
 "type": "TRAVERSAL",
 "cwe": [
  "CWE-22"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "2.3.4",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 2.3.4"
  ]
 },
 "introduced_in": null,
 "fixed_in": "2.3.4",
 "remediation": "Update to 2.3.4 or later.",
 "fix_released": "2026-11-02T20:13:42+00:00",
 "published": "2026-11-03T20:40:54+00:00",
 "updated": "2026-11-03T13:23:41.865090+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2434/",
  "https://plugins.svn.wordpress.org/video-comments-webcam-recorder/tags/2.3.4/",
  "https://wordpress.org/plugins/video-comments-webcam-recorder/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/video-comments-webcam-recorder",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "None seen",
  "as_of": "2026-11-04"
 }
}