CVE-2026-107430: WordPress VideoWhisper Site Manager for ChatGPT, Claude, Codex plugin <= 1.2.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VideoWhisper Site Manager for ChatGPT, Claude, Codex: from n/a through 1.2.10.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
videowhisper-site-managerto a version that resolves this vulnerability.Fixed in 1.2.11
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability has a low-privileges requirement (PR:L), so an attacker needs an authenticated account with at least some level of access. It is remotely reachable (AV:N) and does not require user interaction.
What versions are affected?
VideoWhisper Site Manager for ChatGPT, Claude, Codex is affected through version 1.2.10. The available data does not identify a fixed version.
What is the likely impact?
Successful exploitation may allow unauthorized access-control bypass resulting in limited confidentiality and integrity impact. The CVSS vector indicates no availability impact.