Xwp Stream vulnerabilities
- xwp stream – activity log & audit trail Stream <= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via Heartbeat API 6.5 Medium
- sound4 ltd. stream Stream <= 4.0.2 - Authenticated (Admin+) Server-Side Request Forgery 5.5 Medium
- sound4 ltd. stream Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update 8.8 High
- sound4 ltd. stream WordPress Stream Plugin <= 3.9.2 is vulnerable to Insecure Direct Object References (IDOR) 4.3 Medium
- sound4 ltd. stream WordPress Stream Plugin <= 3.9.2 is vulnerable to Cross Site Request Forgery (CSRF) 5.4 Medium
- sound4 ltd. stream Stream < 3.9.2 - Subscriber+ Alert Creation 6.5 Medium
- sound4 ltd. stream Stream < 3.8.2 - Admin+ SQL Injection 8.8 High