Access Control Issues in VideoWhisper Site Manager for ChatGPT and Claude
CVE-2026-107430

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Videowhisper Site Manager For Chatgpt, Claude, Codex
Vendor
CVE Published:
12 October 2026

What is CVE-2026-107430?

The vulnerability in VideoWhisper Site Manager allows unauthorized access due to incorrectly configured access control security levels, potentially leading to exploitation by malicious actors. This issue affects versions of the application up to 1.2.10, compromising sensitive functionalities and user interactions across the platform. Users are advised to review their security settings and update to the latest version to mitigate risks.

Affected Version(s)

VideoWhisper Site Manager for ChatGPT, Claude, Codex 0 <= 1.2.10

References

https://patchstack.com/database/wordpress/plugin/videowhi...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Erik Debye | Patchstack Bug Bounty Program
.