Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: wpstream Clear all filters
TI-2026-28500 CVE-2026-39526 · GHSA-hh4r-jcrc-4266

WordPress WpStream plugin < 4.11.2 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 24

Authorization Bypass Through User-Controlled Key vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through < 4.11.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00238 Published 2026-04-08 No fix listed CWE-639
TI-2025-42043 CVE-2025-68522 · GHSA-266w-r6vg-579f

WordPress WpStream plugin <= 4.9.5 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through <= 4.9.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00201 Published 2025-12-24 No fix listed CWE-862
TI-2025-42042 CVE-2025-68521 · GHSA-489x-g8w5-gfwp

WordPress WpStream plugin <= 4.9.5 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through <= 4.9.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00218 Published 2025-12-24 No fix listed CWE-862
TI-2023-12190 CVE-2023-27458 · GHSA-v2cx-mh6q-cmc3

Cross-site request forgery in WpStream

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in wpstream WpStream plugin <= 4.4.10 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2023-11-22 No fix listed CWE-352