CVE-2026-115963
HighCVSS 7.1Summary
The Broadcast Live Video plugin by VideoWhisper.com contains a Missing Authorization vulnerability that allows Exploiting Incorrectly Configured Access Control Security Levels. The issue affects versions from n/a through 7.3.9.
Risk Assessment
An attacker can access features or resources that should be protected and perform unauthorized actions, potentially compromising the confidentiality or integrity of the site.
Recommendation
Update the Broadcast Live Video plugin to a version newer than 7.3.9. If no fix is available, consider disabling the plugin.
Other vulnerabilities in Broadcast Live Video
See all- CVE-2026-27053Critical
In Broadcast Live Video versions below 7.1.3, there is a vulnerability to unauthenticated PHP object injection.
- CVE-2026-111839Medium
The Broadcast Live Video plugin up to version 7.3.7 contains a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. An unauthorized user may access functions requiring privileges.
- CVE-2026-107421High
The Broadcast Live Video plugin by VideoWhisper.com up to version 7.3.2 contains a Session Fixation vulnerability that allows session hijacking.
- CVE-2026-108475Medium
The Broadcast Live Video plugin by VideoWhisper.com up to version 7.3.6 contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.
- CVE-2026-57716Medium
Broadcast Live Video plugin version 7.2.4 and earlier allows an unauthenticated attacker to arbitrarily delete files. The attacker can delete critical system files.
- CVE-2026-24937High
The Broadcast Live Video plugin by VideoWhisper.Com for WordPress before version 7.1.3 contains a Code Injection vulnerability. This allows an attacker to inject and execute arbitrary code.
Original NVD description (English source)
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.9.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS