Skip to content
OpenAdvisories

Product · Iqonic Design

Streamit

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Download

    The Sreamit theme for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 4.0.1. This is due to insufficient file validation in the 'st_send_download_file' function. This makes it possible for authenticated attackers, wit…