CVE-2021-24772

概要

参考情報

• plugins.trac.wordpress.org/changeset/2615811/stream · Patch
• wpscan.com/vulnerability/b9d4f2ad-2f12-4822-817d-982a016af85d · Exploit

stream のその他の脆弱性

• CVE-2024-7423高 8.8The Stream plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.1. This is due to miss…
• CVE-2022-43450中 6.5Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through 3.9.2.
• CVE-2022-43490高 8.8Cross-Site Request Forgery (CSRF) vulnerability in XWP Stream plugin <= 3.9.2 versions.
• CVE-2022-4384中 6.5The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) from using its alert c…