High · 7.2 CVE-2026-24937 EUVD-2026-31763GHSA-296g-v265-85g6

WordPress Broadcast Live Video plugin < 7.1.3 - Remote Code Execution (RCE) vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in VideoWhisper.Com Broadcast Live Video allows Code Injection.

This issue affects Broadcast Live Video: from n/a before 7.1.3.

Vendor	Product	Affected	Fixed
VideoWhisper.com	Broadcast Live Video	< 7.1.3	7.1.3