CVE-2022-43490

CVE-2022-43490 affects the WordPress Stream plugin prior to version 3.9.3, with CSRF vulnerability allowing unauthenticated actions. According to Patchstack and Red Hat/NVD entries, the issue is fixed in 3.9.3; CVSS v3.1 base score 8.8 (HIGH) on NVD and 5.4 (MEDIUM) on Patchstack, depending on ve...

CVE-2022-43450

CVE-2022-43450 affects WordPress Stream plugin versions = 3.9.3. If upgrading, verify plugin version after patch to ensure the vulnerability is mitigated.