Lucene search
WPScanCVELIST:CVE-2022-4384HistoryFeb 06, 2023 - 7:59 p.m.
CVE-2022-4384 Stream < 3.9.2 - Subscriber+ Alert Creation
2023-02-0619:59:16
WPScan
www.cve.org
wordpress plugin vulnerability
version 3.9.2
user privileges
sensitive information leak
0.001 Low
EPSS
Percentile
29.7%
The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) from using its alert creation functionality, which may enable them to leak sensitive information.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Stream",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "3.9.2"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
wpvulndb
wpvulndb
Stream < 3.9.2 - Subscriber+ Alert Creation
2023-01-16 00:00:00
cve
cve
CVE-2022-4384
2023-02-06 20:15:11
prion
prion
Information disclosure
2023-02-06 20:15:00
nvd
nvd
CVE-2022-4384
2023-02-06 20:15:11
wpexploit
wpexploit
Stream < 3.9.2 - Subscriber+ Alert Creation
2023-01-16 00:00:00