Log out
Get PRO

Latest

Input validation vulnerability in WP Social Stream 1.1

  • Severity: medium-risk
  • Status: Open
  • Publication: February 3, 2025

The WP Social Stream plugin for WordPress has a security issue that makes it vulnerable to unauthorized changes. This can happen because the plugin does not properly check for a special code called a nonce. This means that someone who is not logged in to the website can make changes to the plugin and potentially add harmful code. This can happen if they trick the website administrator into clicking a link.

Detected in:

WP Social Stream open vulnerable versions: >= * <= 1.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.