Lucene search
WPScanCVELIST:CVE-2022-4384HistoryFeb 06, 2023 - 7:59 p.m.
CVE-2022-4384 Stream < 3.9.2 - Subscriber+ Alert Creation
2023-02-0619:59:16
WPScan
www.cve.org
2
wordpress plugin vulnerability
version 3.9.2
user privileges
sensitive information leak
EPSS
0.001
Percentile
30.1%
The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) from using its alert creation functionality, which may enable them to leak sensitive information.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Stream",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "3.9.2"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2022-4384
2023-02-06 20:15:11
prion
prion
Information disclosure
2023-02-06 20:15:00
wpvulndb
wpvulndb
Stream < 3.9.2 - Subscriber+ Alert Creation
2023-01-16 00:00:00
wpexploit
wpexploit
Stream < 3.9.2 - Subscriber+ Alert Creation
2023-01-16 00:00:00
nvd
nvd
CVE-2022-4384
2023-02-06 20:15:11