CVE-2026-27053: VideoWhisper.com Broadcast Live Video, десериализация

Описание

Оригинално описание

Unauthenticated PHP Object Injection in Broadcast Live Video < 7.1.3 versions.

Засегнати продукти

• VideoWhisper.com Broadcast Live Video: n/a преди 7.1.3

Вид слабост

• CWE-502 Десериализация на ненадеждни данни

История

Други уязвимости в VideoWhisper.com Broadcast Live Video

• 7.1CVE-2026-115963
• 5.3CVE-2026-111839
• 7.3CVE-2026-107421
• 4.3CVE-2026-108475
• 7.2CVE-2026-24937

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-27053
• https://nvd.nist.gov/vuln/detail/CVE-2026-27053
• https://patchstack.com/database/wordpress/plugin/videowhisper-live-streaming-integration/vulnerability/wordpress-broadcast-live-video-plugin-7-1-3-php-object-injection-vulnerability?_s_id=cve