CVE-2026-108475: WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Broadcast Live Video pluginto a version that resolves this vulnerability.Fixed in 7.3.7
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates that an attacker needs network access and low-level privileges. No user interaction is required.
Which installations are affected?
Broadcast Live Video versions through 7.3.6 are affected. The available information does not state whether any particular default configuration or deployment scenario is required.
What is the likely security impact?
The issue is broken access control caused by missing authorization. It can result in integrity impact, while no confidentiality or availability impact is indicated by the supplied CVSS vector.