CVE-2026-24937 — WordPress Broadcast Live Video plugin < 7.1.3 - Remote Code Execution (RCE) vulnerability

CVE-2026-24937

WordPress Broadcast Live Video plugin < 7.1.3 - Remote Code Execution (RCE) vulnerability PUBLISHED

Description (CNA)

Improper Control of Generation of Code ('Code Injection') vulnerability in VideoWhisper.Com Broadcast Live Video allows Code Injection. This issue affects Broadcast Live Video: from n/a before 7.1.3.

Affected (CNA)

Vendor / product	Versions
VideoWhisper.com / Broadcast Live Video	affected n/a before 7.1.3

CWE

CWE-94

References

https://patchstack.com/database/wordpress/plugin/videowhisper-live-streaming-integration/vulnerability/wordpress-broadcast-live-video-plugin-7-1-3-remote-code-execution-rce-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.