CVE-2022-4384

Exploit

EPSS 0.45%
Published 06.02.2023 20:15:11
Last modified 25.03.2025 21:15:38
Source contact@wpscan.com
Teams watchlist Login
Open Login

The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) from using its alert creation functionality, which may enable them to leak sensitive information.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Xwp ≫ Stream SwPlatformwordpress Version < 3.9.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.45%	0.63

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

https://wpscan.com/vulnerability/2b506252-6f37-439e-8984-7316d5cca2e5

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2022-4384

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-4384

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-4384

EUVD