Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP

Live video streaming with WebRTC, HLS, RTMP — broadcast from webcam, OBS, IP cameras. Channel management, scheduling, chat, membership, pay-per-view.

v7.2.5videowhisperUpdated Added 500 installs54% rating
25
Score
205
Errors
959
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance98
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

1,164 findings

Security

744

10 issue groups

Maintainability

385

15 issue groups

WARNINGSecurityRequest data is not unslashed$_COOKIE['htmlchat_username'] not unslashed before sanitization. Use wp_unslash() or similar195
Category
Security
Occurrences
195
Severity
warning

Sample message

$_COOKIE['htmlchat_username'] not unslashed before sanitization. Use wp_unslash() or similar

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_FILES['uploadPicture']['name']. Check that the array index exists before using it.143
Category
Security
Occurrences
143
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_FILES['uploadPicture']['name']. Check that the array index exists before using it.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.116
Category
Maintainability
Occurrences
116
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.109
Category
Security
Occurrences
109
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().104
Category
Maintainability
Occurrences
104
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$activity_lines'.87
Category
Security
Occurrences
87
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$activity_lines'.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_COOKIE['htmlchat_username']81
Category
Security
Occurrences
81
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_COOKIE['htmlchat_username']

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.76
Category
Security
Occurrences
76
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$authKey".44
Category
Maintainability
Occurrences
44
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$authKey".

ERRORSecurityUnsupported Identifier PlaceholderThe %i modifier is only supported in WP 6.2 or higher. Found: "%i".41
Category
Security
Occurrences
41
Severity
error

Sample message

The %i modifier is only supported in WP 6.2 or higher. Found: "%i".

Show 15 more
ERRORMaintainabilityNot Allowed24
Category
Maintainability
Occurrences
24
Severity
error

Sample message

Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead

WARNINGMaintainabilityerror log error log19
Category
Maintainability
Occurrences
19
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

ERRORMaintainabilityfile system operations mkdir19
Category
Maintainability
Occurrences
19
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

WARNINGMaintainabilityslow db query meta query13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityerror log print r12
Category
Maintainability
Occurrences
12
Severity
warning

Sample message

print_r() found. Debug code should not normally be used in production.

WARNINGMaintainabilityMissing Version9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNINGSecurityInterpolated SQL is not prepared6
Category
Security
Occurrences
6
Severity
warning

Sample message

Use placeholders and $wpdb-&gt;prepare(); found interpolated variable $table_channels at &quot;INSERT INTO `$table_channels` ( `owner`, `name`, `sdate`, `edate`, `rdate`,`status`, `type`) VALUES (%d, %s, %d, %d, %d, %d, %d)&quot;

WARNINGMaintainabilityNon-prefixed hook name5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: &quot;get_usernumposts&quot;.

WARNINGMaintainabilityNot In Footer5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNINGMaintainabilityslow db query meta key4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of meta_key, possible slow query.

ERRORMaintainabilitydate date4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.

ERRORMaintainabilityunlink unlink4
Category
Maintainability
Occurrences
4
Severity
error

Sample message

unlink() is discouraged. Use wp_delete_file() to delete a file.

ERRORSecurityDatabase parameter is not escaped3
Category
Security
Occurrences
3
Severity
error

Sample message

Unescaped parameter $sql used in $wpdb->get_row()\n$sql assigned unsafely at line 1075.

ERRORSecuritySQL query is not prepared3
Category
Security
Occurrences
3
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $sql

WARNINGMaintainabilityNon-prefixed function3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: &quot;cmp_by_order&quot;.

External Connections

Potential connections found in static code analysis.

64 domains

Outbound calls

293

External assets

1

Incoming endpoints

6

Notable Domains

deepl.com36 · outbound
videowhisper.com22 · outbound
webrtchost.com21 · outbound
woocommerce.com16 · outbound

Platform / Reference Domains

wordpress.org29 · platform/reference
github.com16 · platform/reference
opensource.org3 · platform/reference
developer.wordpress.org1 · platform/reference
w3.org1 · platform/reference

External Asset Domains

api.lovense.com1 · asset

Incoming Endpoints

/wp-json/videowhisper/v1/webcamapp/loginREST

register_rest_route

wp_ajax_nopriv_vw_webcamapp_configpublic

wp_ajax

wp_ajax_nopriv_vw_webcamapp_snapshotpublic

wp_ajax

Admin AJAX endpoints3
wp_ajax_vw_webcamapp_configauthenticated

wp_ajax

wp_ajax_vw_webcamapp_snapshotauthenticated

wp_ajax

wp_ajax_vws_noticeauthenticated

wp_ajax

Score History

2 score snapshots

+0
1007550250Jun 25, 2026, 08:51 PM UTC Score 25/100 Plugin v7.2.3 Plugin Check 2.0.0 298 errors, 1,010 warningsJun 30, 2026, 09:09 PM UTC Score 25/100 Plugin v7.2.5 Plugin Check 2.0.0 205 errors, 959 warningsJun 25, 2026Jun 30, 2026

v7.2.5

25

Latest

Findings
1,164
Errors
205
Warnings
959
Check
2.0.0

v7.2.3

25

Score

Findings
1,308
Errors
298
Warnings
1,010
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related Plugins

Rutube Embed

500 active installs

100
Bradmax Player

1k+ active installs

99
Embed Block for TikTok

500 active installs

99
HLS Player

600 active installs

99