Cpe:2.3:a:videowhisper:broadcast_live_video:*:*:*:*:*:wordpress:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3avideowhisperbroadcast_live_videowordpress/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 13:20:39 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgVideoWhisper Broadcast Live Video: Missing Authorization Vulnerability (CVE-2026-115963)https://feed.craftedsignal.io/briefs/2026-10-videowhisper-auth-bypass/Thu, 29 Oct 2026 13:20:39 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-videowhisper-auth-bypass/The VideoWhisper Broadcast Live Video WordPress plugin contains a missing authorization vulnerability (CVE-2026-115963) in versions up to 7.3.9, allowing unauthorized users to bypass access control checks.A missing authorization vulnerability in the VideoWhisper Broadcast Live Video WordPress plugin, tracked as CVE-2026-115963, allows unauthorized actors to perform actions restricted by access control levels. The vulnerability affects all versions up to and including 7.3.9. There is no information provided regarding a fix or update version at this time.

Impact

Successful exploitation may allow an unauthorized user to perform administrative or restricted actions within the plugin, potentially leading to unauthorized access to features or data managed by the integration.

Recommendation

  • Inventory all WordPress instances running the VideoWhisper Broadcast Live Video plugin.
  • Disable the plugin if it is not business-critical until an official security update is released by the vendor.
  • Monitor WordPress administrative logs for unauthorized access to plugin settings or video stream configurations.
]]>highadvisoryvulnerabilitywordpressauth-bypass