CVE-2026-111839: WordPress Broadcast Live Video plugin <= 7.3.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Broadcast Live Video pluginto a version that resolves this vulnerability.Fixed in 7.3.8
Event History
Frequently Asked Questions
Which installations are affected?
Broadcast Live Video versions through 7.3.7 are affected. The available data does not identify a fixed version.
Can this be exploited remotely without an account?
Yes. The vector is network-based, requires low attack complexity, and requires neither privileges nor user interaction.
What is the likely impact of successful exploitation?
The provided severity vector indicates low confidentiality impact, with no integrity or availability impact indicated.