CVE Catalog
CVE-2026-57716
MediumCVSS 5.3Summary
Broadcast Live Video plugin version 7.2.4 and earlier allows an unauthenticated attacker to arbitrarily delete files. The attacker can delete critical system files.
Risk Assessment
The organization may lose video data, configuration files, or the entire website, leading to complete loss of availability.
Recommendation
Immediately update the Broadcast Live Video plugin to a version above 7.2.4.
Other vulnerabilities in Broadcast Live Video
See all- CVE-2026-27053Critical
In Broadcast Live Video versions below 7.1.3, there is a vulnerability to unauthenticated PHP object injection.
- CVE-2026-24937High
The Broadcast Live Video plugin by VideoWhisper.Com for WordPress before version 7.1.3 contains a Code Injection vulnerability. This allows an attacker to inject and execute arbitrary code.
Original NVD description (English source)
Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions.