How many CVEs does xwp stream have?

xwp stream has 6 published CVE records since 2021.

How many xwp stream CVEs are in CISA KEV?

None of xwp stream's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for xwp stream vulnerabilities?

Yes — 1 of xwp stream's CVEs have a known public exploit.

Which versions of xwp stream are affected?

99 distinct xwp stream versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in xwp stream CVEs?

xwp stream's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-918 (Server-Side Request Forgery (SSRF)).

What is the average severity of xwp stream CVEs?

The average CVSS base score across xwp stream's scored CVEs is 7.5.

xwp stream Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every xwp stream version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.21 CVE
0.51 CVE
0.61 CVE
0.71 CVE
0.7.11 CVE
0.7.21 CVE
0.7.31 CVE
0.81 CVE
0.8.11 CVE
0.8.21 CVE
0.91 CVE
0.9.21 CVE
0.9.31 CVE
0.9.51 CVE
0.9.81 CVE
0.9.91 CVE
1.01 CVE
1.0.11 CVE
1.0.21 CVE
1.0.41 CVE
1.0.61 CVE
1.0.71 CVE
1.0.81 CVE
1.0.91 CVE
1.11 CVE
1.1.31 CVE
1.1.41 CVE
1.1.51 CVE
1.1.61 CVE
1.1.71 CVE
1.1.81 CVE
1.1.91 CVE
1.21 CVE
1.2.11 CVE
1.2.21 CVE
1.2.51 CVE
1.2.61 CVE
1.2.71 CVE
1.3.01 CVE
1.3.11 CVE
1.4.31 CVE
1.4.51 CVE
1.4.61 CVE
2.0.01 CVE
2.0.0-beta11 CVE
2.0.11 CVE
2.0.21 CVE
2.0.31 CVE
2.0.41 CVE
2.0.51 CVE
3.0.01 CVE
3.0.11 CVE
3.0.21 CVE
3.0.31 CVE
3.0.41 CVE
3.0.51 CVE
3.0.61 CVE
3.0.71 CVE
3.11 CVE
3.1.11 CVE
3.10.01 CVE
3.2.01 CVE
3.2.31 CVE
3.3.01 CVE
3.4.01 CVE
3.4.11 CVE
3.4.21 CVE
3.4.31 CVE
3.5.01 CVE
3.5.11 CVE
3.6.01 CVE
3.6.11 CVE
3.6.21 CVE
3.7.01 CVE
3.8.01 CVE
3.8.11 CVE
3.8.21 CVE
3.9.01 CVE
3.9.11 CVE
3.9.21 CVE
3.9.31 CVE
4.0.01 CVE
4.0.11 CVE
4.0.21 CVE
4.0.2-rc.11 CVE

Version ranges

<= 3.9.22 CVEs
>= 3.9.32 CVEs
< 3.8.21 CVE
< 3.9.21 CVE
< 4.0.21 CVE
<= 4.0.11 CVE
<= 4.0.21 CVE

Fixed in

> 3.9.22 CVEs
3.9.32 CVEs
> 4.0.11 CVE
> 4.0.21 CVE
3.8.21 CVE
3.9.21 CVE
4.0.21 CVE

Find a version

6 CVEs

Sort

Stream <= 4.0.2 - Authenticated (Admin+) Server-Side Request Forgery
CVE-2024-13879
Patch
CWE-918
Medium · CVSS 5.5
EPSS 0.3% (26th pct)2025-02-17
Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update
CVE-2024-7423
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (23th pct)2024-09-13
WordPress Stream Plugin <= 3.9.2 is vulnerable to Insecure Direct Object References (IDOR)
CVE-2022-43450
Patch
CWE-639
Medium · CVSS 6.5
EPSS 0.7% (48th pct)2023-12-19
WordPress Stream Plugin <= 3.9.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-43490
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (18th pct)2023-05-25
Medium vulnerability · 2023-02-06
CVE-2022-4384
Public exploit
Patch
Medium · CVSS 6.5
EPSS 0.9% (56th pct)2023-02-06
High vulnerability · 2021-11-17
CVE-2021-24772
Patch
CWE-89
High · CVSS 8.8
EPSS 1.5% (72th pct)2021-11-17

xwp stream Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other xwp products

Frequently asked questions

References

Track xwp stream vulnerabilities