Input validation vulnerability in Stream 4.0.1

The Stream plugin used in WordPress is not secure in versions up to 4.0.1. This is because there is a problem with the way it checks for a specific code to protect against fake requests. This allows people who are not logged in to make changes to important settings, which could cause the website to crash or give them more control over it. This could happen if they convince the person who manages the website to click on a link.

Detected in:

Stream fixed vulnerable versions: >= * <= 4.0.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.