CVE-2026-124414 · Package
NO FIX YET
The Broadcast Live Video plugin (videowhisper-live-streaming-integration) for WordPress has a weak authentication flaw affecting versions through 7.3.15. Per the NVD description, an attacker can abuse authentication to gain access they should not have.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Sites running the Broadcast Live Video WordPress plugin at version 7.3.15 or earlier are in the affected range per NVD. The sources do not say which configuration or features are needed to be exposed, or whether authentication is required first. unknown
Who cares broadcast-live-video, videowhisper, wordpress
7.3.15.No fix yet, per the sources.
Weak Authentication vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Authentication Abuse.This issue affects Broadcast Live Video: from n/a through 7.3.15.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.