Description
Cross-Site Request Forgery (CSRF) vulnerability in XWP Stream plugin <= 3.9.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| XWP | Stream | ≤ 3.9.2 | — |
Medium · 5.4
CVE-2022-43490
EUVD-2022-46488GHSA-fcr6-wjf5-jw82
WordPress Stream Plugin <= 3.9.2 is vulnerable to Cross Site Request Forgery (CSRF)
Published May 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack