CVE-2026-107421: WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hijacking vulnerability
Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Broadcast Live Video pluginto a version that resolves this vulnerability.Fixed in 7.3.3
Event History
Frequently Asked Questions
Which plugin versions are affected?
Broadcast Live Video versions through 7.3.2 are affected. The available data does not identify a fixed version.
Can this be exploited remotely without an account or user interaction?
Yes. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What impact could successful exploitation have?
Successful exploitation may result in session hijacking. The supplied severity data rates confidentiality, integrity, and availability impact as low.
How can I determine whether my site is affected?
Check whether the site uses the VideoWhisper.com Broadcast Live Video plugin and identify its installed version. Versions up to and including 7.3.2 fall within the affected range.