CVE-2026-27053
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
In Broadcast Live Video versions below 7.1.3, there is a vulnerability to unauthenticated PHP object injection.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the application, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to version 7.1.3 or later to mitigate this vulnerability.
Other vulnerabilities in Broadcast Live Video
See all- CVE-2026-57716Medium
Broadcast Live Video plugin version 7.2.4 and earlier allows an unauthenticated attacker to arbitrarily delete files. The attacker can delete critical system files.
- CVE-2026-24937High
The Broadcast Live Video plugin by VideoWhisper.Com for WordPress before version 7.1.3 contains a Code Injection vulnerability. This allows an attacker to inject and execute arbitrary code.
Original NVD description (English source)
Unauthenticated PHP Object Injection in Broadcast Live Video < 7.1.3 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS