Lucene search
HistoryFeb 06, 2023 - 8:15 p.m.
CVE-2022-4384
stream plugin
unauthorized users
info leaks
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
33.5%
The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) from using its alert creation functionality, which may enable them to leak sensitive information.
Affected configurations
Node
xwpstreamRange<3.9.2wordpress
Related
prion
prion
Information disclosure
2023-02-06 20:15:00
cve
cve
CVE-2022-4384
2023-02-06 20:15:11
wpvulndb
wpvulndb
Stream < 3.9.2 - Subscriber+ Alert Creation
2023-01-16 00:00:00
cvelist
cvelist
CVE-2022-4384 Stream < 3.9.2 - Subscriber+ Alert Creation
2023-02-06 19:59:16
wpexploit
wpexploit
Stream < 3.9.2 - Subscriber+ Alert Creation
2023-01-16 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
33.5%
Related for NVD:CVE-2022-4384