XWP vulnerabilities
5 published CVEs name XWP among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-11907
Stream <= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via Heartbeat API
xwp · Stream – Activity Log & Audit Trail
Medium6.5 - CVE-2024-13879
Stream <= 4.0.2 - Authenticated (Admin+) Server-Side Request Forgery
xwp · Stream
Medium5.5 - CVE-2024-7423
Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update
xwp · Stream
High8.8 - CVE-2022-43450
WordPress Stream Plugin <= 3.9.2 is vulnerable to Insecure Direct Object References (IDOR)
XWP · Stream
Medium4.3 - CVE-2022-43490
WordPress Stream Plugin <= 3.9.2 is vulnerable to Cross Site Request Forgery (CSRF)
XWP · Stream
Medium5.4