Read the docs

wpstream

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

wpstream records in CISA KEV

No wpstream vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpstream 2 records LOW

Records

5 records

TI-2023-12190 CVE-2023-27458 · GHSA-v2cx-mh6q-cmc3

Cross-site request forgery in WpStream

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in wpstream WpStream plugin <= 4.4.10 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2023-11-22 No fix listed CWE-352
TI-2025-42042 CVE-2025-68521 · GHSA-489x-g8w5-gfwp

WordPress WpStream plugin <= 4.9.5 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through <= 4.9.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00218 Published 2025-12-24 No fix listed CWE-862
TI-2026-28500 CVE-2026-39526 · GHSA-hh4r-jcrc-4266

WordPress WpStream plugin < 4.11.2 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 24

Authorization Bypass Through User-Controlled Key vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through < 4.11.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00238 Published 2026-04-08 No fix listed CWE-639
TI-2025-42043 CVE-2025-68522 · GHSA-266w-r6vg-579f

WordPress WpStream plugin <= 4.9.5 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through <= 4.9.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00201 Published 2025-12-24 No fix listed CWE-862
Open these records in search →