Threats tagged 'ghsa-vq9h-6p44-rphw'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-11907Stream (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.4%2026-08-07CVE Database V5CVE-2026-11907 The Stream plugin for WordPress up to version 4.2.0 contains an authorization bypass vulnerability. This flaw allows authenticated users with subscriber-level access or higher to access all activity records via the Heartbeat API without proper authorization checks. The vulnerability is identified as CWE-862 and has a medium severity rating with a CVSS score of 6.5. EPSS 0.4%Vulnerability xwp CWE-862 #ghsa-vq9h-6p44-rphw	CVE Database V5	2026-08-07

Page 1 of 1