CVE-2026-107421

Deferred Deferred - Pending Action

Session Fixation in VideoWhisper Live Streaming Integration

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Patchstack

Description

Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: from n/a through 7.3.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-107421

EUVD

EUVD-2026-101014

Affected Vendors & Products

Vendor	Product	Version / Range
VideoWhisper.com	Broadcast	Live Video 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-384	Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

Attack-Flow Graph

Executive Summary

CVE-2026-107421 is a Session Fixation vulnerability in the VideoWhisper.com Broadcast Live Video plugin for WordPress. It allows attackers to hijack active user sessions without needing passwords, enabling unauthorized actions on affected websites.

Detection Guidance

Detecting this vulnerability requires checking if the VideoWhisper Broadcast Live Video plugin is installed and if it is outdated. Review installed WordPress plugins via the WordPress admin panel or database. Look for the plugin named 'Broadcast Live Video' and verify its version. If the version is 7.3.2 or earlier, the system is vulnerable.

Impact Analysis

This vulnerability can lead to session hijacking, where attackers take over logged-in users' sessions. This may result in unauthorized access to sensitive data, control over the website, or execution of malicious actions without user consent.

Compliance Impact

This vulnerability could lead to unauthorized access to user sessions, potentially exposing sensitive data. This may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Update the VideoWhisper Broadcast Live Video plugin to version 7.3.3 or later immediately. Apply Patchstack's mitigation rule to block attacks until the update is completed.

Hi! I’m here to help you understand CVE-2026-107421. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70