CVE-2026-124414: WordPress Broadcast Live Video plugin <= 7.3.15 - Broken Authentication vulnerability

Q: Does exploitation require an authenticated account or user interaction?

No. The CVSS vector indicates the issue is remotely exploitable over the network, requires no privileges, and requires no user interaction.

Q: What is the expected security impact if this issue is exploited?

The reported impact is limited to integrity, with no reported confidentiality or availability impact. The issue is categorized as authentication abuse.

Q: Which plugin versions should be considered affected?

The affected range is reported as versions through 7.3.15, with no lower version specified.

Published Nov 13, 2026

Updated

Weak Authentication vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Authentication Abuse.This issue affects Broadcast Live Video: from n/a through 7.3.15.

Affected Software

1 affected component

VideoWhisper.com Broadcast Live Video<=7.3.15

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/videowhisper-live-streaming-integration to a version that resolves this vulnerability.
Fixed in 7.3.16

Event History

Nov 13, 2026

CVE Published

via MITRE·03:08 PM

Data Sourced

via MITRE·03:08 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require an authenticated account or user interaction?

No. The CVSS vector indicates the issue is remotely exploitable over the network, requires no privileges, and requires no user interaction.

What is the expected security impact if this issue is exploited?

The reported impact is limited to integrity, with no reported confidentiality or availability impact. The issue is categorized as authentication abuse.

Which plugin versions should be considered affected?

The affected range is reported as versions through 7.3.15, with no lower version specified.

CVE-2026-124414: WordPress Broadcast Live Video plugin <= 7.3.15 - Broken Authentication vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Does exploitation require an authenticated account or user interaction?

What is the expected security impact if this issue is exploited?

Which plugin versions should be considered affected?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require an authenticated account or user interaction?

What is the expected security impact if this issue is exploited?

Which plugin versions should be considered affected?