Veille CVE

Recherche « xwp Stream – Activity Log & Audit Trail »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « xwp Stream – Activity Log & Audit Trail » ✕
  1. CVE-2026-11907 6.5 Moyenne

    xwp Stream – Activity Log & Audit Trail

    The Stream plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to access all Stream activity records via the Heartbeat API.