CVE-2023-38512
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
The WpStream plugin has a Cross-Site Request Forgery (CSRF) vulnerability, allowing unauthorized actions on behalf of the user. This issue affects versions from n/a to 4.5.4.
Risk Assessment
An attacker could exploit this vulnerability to perform unauthorized operations, potentially leading to data loss or compromise of user accounts.
Recommendation
It is recommended to update the WpStream plugin to the latest version to mitigate this vulnerability. Additionally, implementing CSRF protection mechanisms is advisable.
Other vulnerabilities in WpStream
See all- CVE-2026-39527Medium
WpStream versions below 4.11.2 have a vulnerability allowing subscribers to upload arbitrary files.
- CVE-2026-39526Medium
The WpStream plugin contains an authorization bypass vulnerability through a user-controlled key, allowing exploitation of incorrectly configured access control security levels. This issue affects all versions from n/a through 4.11.2 (excluding 4.11.2).
Original NVD description (English source)
Cross-Site Request Forgery (CSRF) vulnerability in wpstream WpStream wpstream allows Cross Site Request Forgery.This issue affects WpStream: from n/a through <= 4.5.4.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS