The Video Posts Webcam Recorder WordPress plugin before 3.2.4 has an authenticated reflected cross site scripting (XSS) vulnerability in one of the administrative functions for handling deletion of videos.
https://wpscan.com/vulnerability/458a576e-a7ed-4758-a80c-cd08c370aaf4