All packages
WpStream vulnerabilities
3 known CVE vulnerabilities in WpStream, translated and rated.
- CVE-2026-39527Medium
WpStream versions below 4.11.2 have a vulnerability allowing subscribers to upload arbitrary files.
- CVE-2026-39526Medium
The WpStream plugin contains an authorization bypass vulnerability through a user-controlled key, allowing exploitation of incorrectly configured access control security levels. This issue affects all versions from n/a through 4.11.2 (excluding 4.11.2).
- CVE-2023-38512Medium
The WpStream plugin has a Cross-Site Request Forgery (CSRF) vulnerability, allowing unauthorized actions on behalf of the user. This issue affects versions from n/a to 4.5.4.