WP Security CheckVulnerability data as of October 25, 2026

Known vulnerabilities in 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat

Add private video call rooms and random video chat to WordPress with HTML5/WebRTC apps, CallChat, RandomChat, and shareable room links.

3Reported vulnerabilities
6.1Highest CVSS score
6.1.4Latest version
20+Active installs

What to do now

Update 2Way VideoCalls and Random Chat – HTML5 Webcam Videochat to 6.1.6 or later. 3 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 7, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2021-34656 Medium 6.1 0.9% 5.2.7 and earlier 5.2.8 August 16, 2021
WF-92b1a47e-31e2-4cfd-a24c-460ff2f00d09 Medium 6.1 — 4.41 and earlier 4.41.2 September 17, 2014
CVE-2026-110883 Medium 5.3 0.3% 6.1.5 and earlier 6.1.6 October 16, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.