WpStream vulnerabilities

WpStream versions below 4.11.2 have a vulnerability allowing subscribers to upload arbitrary files.

The WpStream plugin contains an authorization bypass vulnerability through a user-controlled key, allowing exploitation of incorrectly configured access control security levels. This issue affects all versions from n/a through 4.11.2 (excluding 4.11.2).

Missing authorization in WpStream wpstream allows exploiting incorrectly configured access control security levels. This issue affects versions up to and including 4.9.5.

Missing authorization in WpStream wpstream allows exploiting incorrectly configured access control security levels. This issue affects versions up to and including 4.9.5.

The WpStream plugin has a Cross-Site Request Forgery (CSRF) vulnerability, allowing unauthorized actions on behalf of the user. This issue affects versions from n/a to 4.5.4.