Description
Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through 3.9.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| XWP | Stream | ≤ 3.9.2 | — |
Medium · 4.3
CVE-2022-43450
EUVD-2022-46452GHSA-3j4h-62vw-5645
WordPress Stream Plugin <= 3.9.2 is vulnerable to Insecure Direct Object References (IDOR)
Published Dec 19, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack