← All advisories

High severity7.2NVD Advisory· Published May 25, 2026· Updated Jul 24, 2026

CVE-2026-24937

CVE-2026-24937

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in VideoWhisper.Com Broadcast Live Video allows Code Injection.

This issue affects Broadcast Live Video: from n/a before 7.1.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/Videowhisper Live Streaming Integrationinferred
Range: <7.1.3
Package: https://wordpress.org/plugins/videowhisper-live-streaming-integration
Videowhisper/Broadcast Live Videollm-fuzzy
Range: <7.1.3
WordPress/Broadcast Live Videollm-fuzzy
Range: <7.1.3

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/videowhisper-live-streaming-integration/vulnerability/wordpress-broadcast-live-video-plugin-7-1-3-remote-code-execution-rce-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (May 25, 2026 to May 31, 2026)
Wordfence Blog · Jun 4, 2026