Session Fixation Vulnerability in VideoWhisper.com Broadcast Live Video
CVE-2026-107421

7.3HIGH

Key Information:

Vendor

WordPress
Status
Broadcast Live Video
Vendor
CVE Published:
14 October 2026

What is CVE-2026-107421?

A session fixation vulnerability exists in the Broadcast Live Video integration offered by VideoWhisper.com, which may allow an attacker to hijack user sessions. This affects users of Broadcast Live Video versions up to 7.3.2, enabling unauthorized access under certain conditions. It is crucial for users to update to the latest version to mitigate potential security risks associated with this vulnerability.

Affected Version(s)

Broadcast Live Video 0 <= 7.3.2

References

https://patchstack.com/database/wordpress/plugin/videowhi...
vdb-entry

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peter Tang | Patchstack Bug Bounty Program
.