Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP

Explore Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP vulnerabilities across all versions. Currently tracking 14 known vulnerabilities, including severity, impact, and patch status.

01234567891020.04.2009Today23.08.20136.1Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.25.3 - Reflected Cross-Site Scripting CVSS 6.1 · 23.08.201306.02.20147.1Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP < 4.29.5 - Cross-Site Scripting CVSS 7.1 · 06.02.201426.02.20146.1Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.29.6 - Cross-Site Scripting CVSS 6.1 · 26.02.201427.02.20145.3Broadcast Live Video – Live Streaming < 4.29.5 - Full Path Disclosure CVSS 5.3 · 27.02.20149.8Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP < 4.29.5 - Arbitrary File Read/Deletion CVSS 9.8 · 27.02.20149.8Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 4.27.4 - Arbitrary File Upload CVSS 9.8 · 27.02.201401.07.20146.1Broadcast Live Video – Live Streaming < 4.27.4 - Cross-Site Scripting CVSS 6.1 · 01.07.201420.02.20239.1Live Streaming - Broadcast Live Video <= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution CVSS 9.1 · 20.02.202322.01.20256.4Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 22.01.202514.02.20259.1Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Deletion CVSS 9.1 · 14.02.20257.5Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Read CVSS 7.5 · 14.02.202519.05.20254.3Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.2.4 - Cross-Site Request Forgery CVSS 4.3 · 19.05.202525.05.20267.2Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP < 7.1.3 - Authenticated (Admin+) Remote Code Execution CVSS 7.2 · 25.05.202628.05.20268.1Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP < 7.1.3 - Unauthenticated PHP Object Injection CVSS 8.1 · 28.05.2026

Strategic Overview

Avg CVSSHigh
7.3/ 10
Patch Coverage100%
Open

0

Fixed

14

Get automatic notifications for all Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP vulnerabilities before they are exploited.

Vulnerability Records

14 records
2026-05-28 00:00CVE-2026-27053
8.1
High
Phat RiOYes
2026-05-25 00:00CVE-2026-24937
7.2
High
SSL-6-s0dYes
2025-05-19 00:00CVE-2025-48255
4.3
Medium
Nabil IrawanYes
2025-02-14 00:00CVE-2025-26752
9.1
Critical
Muhammad Yudha - DJYes
2025-02-14 00:00CVE-2025-26753
7.5
High
Muhammad Yudha - DJYes
2025-01-22 00:00CVE-2024-12504
6.4
Medium
Muhammad Yudha - DJYes
2023-02-20 00:00CVE-2023-25699
9.1
Critical
minhtuanactYes
2014-07-01 00:00CVE-2014-4569
6.1
Medium
Anant Shrivastava (anantshri)Yes
2014-02-27 00:00CVE-2014-1908
5.3
Medium
High-Tech Bridge Security Research LabYes
2014-02-27 00:00CVE-2014-1907
9.8
Critical
High-Tech Bridge Security Research LabYes
Showing 1–10 of 14 reports
Broadcast Live Video &#8211; Live Streaming : WebRTC, HLS, RTSP, RTMP banner
Latestv7.3.1

Broadcast Live Video &#8211; Live Streaming : WebRTC, HLS, RTSP, RTMP

videowhisper

Author

videowhisper

2.7(14)
54/100
Last Updated
2026-07-06 (24d ago)
Active Installs
400+
Downloads
435,395
Requires WP
6.2+
Requires PHP
7.4+
Tested up to
WP 7.0.2
Created
2009-04-20 (18y ago)

Build your own live streaming platform with WordPress. Broadcast Live Video powers turnkey live streaming sites with multiple channel types, web-based broadcasting, chat, monetization, and full content ownership — no third-party platforms required. Broadcast from any source: browser webcams via WebRTC, desktop encoders like OBS, mobile apps like Larix Broadcaster, and 24/7 RTSP/RTMP IP cameras. Broadcast Live Video – Turnkey Streaming Site Solution What’s New in 7.x WebRTC Streaming App — Modern React-based broadcast and playback interface (Webcam-Streaming-WebRTC) with configurable stream quality, watermark overlay, and automatic view routing (broadcast for owners, playback for viewers) Visual Schedule Editor — Program 24/7 channels with a visual schedule builder: daily, weekly, or one-time programs with live stream, video file, and video folder sources with priority ordering and filler content Channel Listing Skins — Choose from ready-made listing designs (Twitchy dark theme, Ticky vertical cards) or fully customize with template placeholders and CSS Improved Channel Management — Card-based grid layout with visual status labels, collapsible menus, breadcrumb navigation, and smart interface-aware controls VideoWhisper Server Integration — Deep integration with VideoWhisper WebRTC Server for RTMP/HLS restreaming, schedule processing, and WebRTC signaling Enhanced Restreaming — Frontend restream channel creation (including guest access), stream pause/resume, admin dashboard with server status, capacity monitoring, and per-stream controls Get Started Free account for testing: Free Streaming account with WebRTC & RTMP/HLS Self-hosted: Deploy VideoWhisper WebRTC Server on your own VPS for full control Live Demos Turnkey site: VideoNow.Live Webcam WebRTC broadcast: [Webcam WebRTC Demo]https://demo.videowhisper.com/Webcam-Streaming-WebRTC/ HTML5 Videochat broadcast: HTML5 Videochat Demo Key Features Broadcasting & Playback WebRTC broadcast and playback via React app with configurable quality (resolution, framerate, bitrate caps) HTML5 HLS / MPEG-DASH live video delivery with automatic protocol selection External encoder support: OBS, Wirecast, XSplit, Larix Broadcaster (iOS/Android) 24/7 IP camera restreaming (RTSP, RTMP, RTMPS, HTTP/HTTPS sources) with Setup Wizard Recording per channel Video archive import with Video Share VOD Channel Management Live video channels as WordPress custom post type Frontend channel setup and management with card-based grid layout Visual status labels: Live, Schedule, IP Camera, WebRTC, Recording, Paused, Restricted Context-aware menus adapting to channel interface type (WebRTC App, Restream, HTML5 Videochat, DASH) Breadcrumb navigation for intuitive channel management Scheduling & Automation Visual schedule editor with daily, weekly, and one-time programming Multiple source types per program: live stream, video file, video folder (with play order and loop options) Source priority system with drag-and-drop reordering Default filler content when no program is scheduled Live/fallback behavior settings per program Timezone support with live clock display Channel Listings Template-based listings with customizable placeholders (#title#, #thumb#, #viewers#, #tags#, #rating#) Ready-made listing skins: Twitchy (Twitch-inspired dark theme), Ticky (TikTok-inspired vertical cards) AJAX live updates with category filtering, tags, and search Offline video thumbnails and teaser support Monetization Membership-ready with WordPress role permissions — works with any membership/subscription plugin Pay-per-view with custom post type — compatible with access control and content selling plugins Tips to broadcasters with myCRED or TeraWallet (WooCommerce gateways) Channel access lists: restrict by user role, login, email, or password Recommended: Paid Membership for credit-based membership purchases Restreaming & IP Cameras Admin restream dashboard with server status, capacity monitoring, and per-stream controls Frontend restream channel creation with guest access support Stream pause/resume, mute audio, auto-cleanup for guest channels Private network detection with confirmation for local sources Push channel configuration to VideoWhisper server Chat & Interaction AJAX chat alongside live video playback Floating watermark/logo overlay Event details display (title, schedule, description) when channel is offline Integrates Rate Star Review for channel ratings Access Control & Administration Fine-grained permissions by role, email, ID, or username Broadcast and watch time limits per channel and per membership level Premium channels with unlimited membership levels Channel statistics: broadcast time, watch time, last activity, viewer counts BuddyPress integration: Live Stream tab in groups Who Is This For? Build platforms similar to Twitch, YouTube Live, Kick, or LiveStream — a self-hosted alternative where you own the content, control access, and keep 100% of revenue. Perfect for: Media companies — launch branded streaming channels Educators — deliver live classes, webinars, and scheduled course content Churches & organizations — stream events and services 24/7 Surveillance — monitor IP cameras with web-based access control Creators & entertainers — monetize live content with tips, pay-per-view, and memberships Hosting Requirements This plugin requires streaming server infrastructure beyond standard WordPress hosting For testing, register for a Free Streaming account with WebRTC & RTMP/HLS Self-hosted: deploy VideoWhisper WebRTC Server on a VPS or dedicated server Some advanced features (FFmpeg transcoding, server commands) require additional server configuration — disabled by default for security External Services This plugin can optionally connect to VideoWhisper Remote Connect when an administrator clicks Connect in the VideoWhisper account settings. The default service URL is https://consult.videowhisper.com. Remote Connect is a free registration-based onboarding service for testing and low-friction setup. It can register or log in a VideoWhisper contact, create/select a free streaming server account, import WebRTC/RTMP/HLS/DASH configuration, and push this site’s stream, notify, Webcam App login, and restream URLs so the plugin can be tested without manual server configuration. Data sent to the service can include the plugin identifier, WordPress site URL/domain, administrator-entered contact name/email, registration form answers, confirmation PINs, selected account token, and generated stream/notification/login/restream URLs needed for automated configuration. Using Remote Connect is optional. Administrators can instead enter compatible streaming server settings manually or configure a separate compatible CRM/streaming service URL. Terms of Use: https://consult.videowhisper.com/terms-of-use/ Privacy Policy: https://consult.videowhisper.com/privacy-policy/ Attributions Some demo site screenshots show tests with the “Big Buck Bunny” video, available under Creative Commons Attribution at https://peach.blender.org/download/ . Documentation Plugin Homepage: https://broadcastlivevideo.com Developer Contact: https://consult.videowhisper.com VideoWhisper Server: https://github.com/videowhisper/videowhisper-webrtc WebRTC Streaming App: https://github.com/videowhisper/Webcam-Streaming-WebRTC Demo Live demo site: https://videonow.live Extra More information, latest updates, other plugins and non-WordPress editions at https://videowhisper.com/ .

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C