Aller au contenu
Se connecter
6.5 Moyenne

CVE-2022-4384 The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers)…

Description

The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) from using its alert creation functionality, which may enable them to leak sensitive information.

Produits et versions touchés

Produit Versions touchées Corrigé en
Stream 3.9 premières → < 3.9.2 3.9.2

Autres CVE de Stream

Les 2 CVE de Stream →
CVE-2021-24772 The Stream WordPress plugin before 3.8.2 does not sanitise and validate the order GET parameter from the Stream… Non notée
Suivre cette CVE