Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP

Information

Software Type Plugin
Software Slug videowhisper-live-streaming-integration (view on wordpress.org)
Software Status Active
Software Author videowhisper
Software Website broadcastlivevideo.com
Software Downloads 435,610
Software Active Installs 400
Software Record Last Updated August 8, 2026

15 Vulnerabilities

Submit a Vulnerability
Broadcast Live Video <= 7.2.4 - Unauthenticated Arbitrary File Deletion
9.1
CVE-2026-57716
Jul 21, 2026
Researcher: dutafi
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP < 7.1.3 - Unauthenticated PHP Object Injection
8.1
CVE-2026-27053
May 28, 2026
Researcher: Phat RiO
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP < 7.1.3 - Authenticated (Admin+) Remote Code Execution
7.2
CVE-2026-24937
May 25, 2026
Researcher: SSL-6-s0d
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.2.4 - Cross-Site Request Forgery
4.3
CVE-2025-48255
May 19, 2025
Researcher: Nabil Irawan
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Read
7.5
CVE-2025-26753
Feb 14, 2025
Researcher: Muhammad Yudha - DJ
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Deletion
9.1
CVE-2025-26752
Feb 14, 2025
Researcher: Muhammad Yudha - DJ
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-12504
Jan 22, 2025
Researcher: Muhammad Yudha - DJ
Live Streaming - Broadcast Live Video <= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution
9.1
CVE-2023-25699
Feb 20, 2023
Researcher: minhtuanact
Broadcast Live Video – Live Streaming < 4.27.4 - Cross-Site Scripting
6.1
CVE-2014-4569
Jul 1, 2014
Researcher: Anant Shrivastava (anantshri)
Broadcast Live Video – Live Streaming < 4.29.5 - Full Path Disclosure
5.3
CVE-2014-1908
Feb 27, 2014
Researcher: High-Tech Bridge Security Research Lab
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP < 4.29.5 - Arbitrary File Read/Deletion
9.8
CVE-2014-1907
Feb 27, 2014
Researcher: High-Tech Bridge Security Research Lab
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.27.4 - Arbitrary File Upload
9.8
CVE-2014-1905
Feb 27, 2014
Researcher: High-Tech Bridge Security Research Lab
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.29.6 - Cross-Site Scripting
6.1
CVE-2014-2297
Feb 26, 2014
Researcher: HauntIT
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP < 4.29.5 - Cross-Site Scripting
7.1
CVE-2014-1906
Feb 6, 2014
Researcher: High-Tech Bridge Security Research Lab
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.25.3 - Reflected Cross-Site Scripting
6.1
CVE-2013-5714
Aug 23, 2013
Researcher: Iranian Exploit DataBase
Title Status CVE ID CVSS Researchers Date
Broadcast Live Video <= 7.2.4 - Unauthenticated Arbitrary File Deletion Patched CVE-2026-57716 9.1 dutafi July 21, 2026
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP < 7.1.3 - Unauthenticated PHP Object Injection Patched CVE-2026-27053 8.1 Phat RiO May 28, 2026
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP < 7.1.3 - Authenticated (Admin+) Remote Code Execution Patched CVE-2026-24937 7.2 SSL-6-s0d May 25, 2026
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.2.4 - Cross-Site Request Forgery Patched CVE-2025-48255 4.3 Nabil Irawan May 19, 2025
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Read Patched CVE-2025-26753 7.5 Muhammad Yudha - DJ February 14, 2025
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Deletion Patched CVE-2025-26752 9.1 Muhammad Yudha - DJ February 14, 2025
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-12504 6.4 Muhammad Yudha - DJ January 22, 2025
Live Streaming - Broadcast Live Video <= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution Patched CVE-2023-25699 9.1 minhtuanact February 20, 2023
Broadcast Live Video – Live Streaming < 4.27.4 - Cross-Site Scripting Patched CVE-2014-4569 6.1 Anant Shrivastava (anantshri) July 1, 2014
Broadcast Live Video – Live Streaming < 4.29.5 - Full Path Disclosure Patched CVE-2014-1908 5.3 High-Tech Bridge Security Research Lab February 27, 2014
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP < 4.29.5 - Arbitrary File Read/Deletion Patched CVE-2014-1907 9.8 High-Tech Bridge Security Research Lab February 27, 2014
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.27.4 - Arbitrary File Upload Patched CVE-2014-1905 9.8 High-Tech Bridge Security Research Lab February 27, 2014
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.29.6 - Cross-Site Scripting Patched CVE-2014-2297 6.1 HauntIT February 26, 2014
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP < 4.29.5 - Cross-Site Scripting Patched CVE-2014-1906 7.1 High-Tech Bridge Security Research Lab February 6, 2014
Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.25.3 - Reflected Cross-Site Scripting Patched CVE-2013-5714 6.1 Iranian Exploit DataBase August 23, 2013

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation