CVE-2026-24937

CVE-2026-24937 covers a Remote Code Execution in the VideoWhisper WordPress Broadcast Live Video plugin (versions before 7.1.3). The root cause is Improper Control of Generation of Code (Code Injection) in the Broadcast Live Video component, exposed via the plugin before version 7.1.3. Public ref...

CVE-2025-48255: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Cross Site Request Forgery.This issue affects Broadcast Live Video: from n/a through = 6.2.4...

CVE-2025-26752: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Path Traversal.This issue affects Broadcast Live Video: from n/a through = 6.2...