This vulnerability is a session fixation flaw that permits an attacker to hijack an existing user session. By exploiting the affected plugin, a malicious actor could potentially impersonate a legitimate user, gain unauthorized access to their content, or manipulate streaming settings, directly compromising the confidentiality and integrity of the streaming session.

The issue affects the WordPress Broadcast Live Video plugin from VideoWhisper.com, impacting all versions up to and including 7.3.2. Any WordPress site using these versions is vulnerable until the plugin is updated.

The CVSS score of 7.3 indicates a high severity, and the EPSS score of < 1% indicates a very low probability of exploitation, while the absence of a KEV listing suggests it has not yet been broadly exploited. An attacker could likely hijack a session by leveraging the session fixation weakness, especially on sites that do not enforce strict session regeneration or lack of documented remediation steps other than an update increases the risk for current users.