CVE-2022-43490

Description

References

• patchstack.com/database/vulnerability/stream/wordpress-stream-plugin-3-9-2-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

stream 的其他漏洞

• CVE-2024-7423高危 8.8The Stream plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.1. This is due to miss…
• CVE-2022-43450中危 6.5Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through 3.9.2.
• CVE-2022-4384中危 6.5The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) from using its alert c…
• CVE-2021-24772高危 8.8The Stream WordPress plugin before 3.8.2 does not sanitise and validate the order GET parameter from the Stream Records admin dashboard befo…