← All advisories

Medium severity4.3NVD Advisory· Published Dec 19, 2023· Updated Apr 28, 2026

CVE-2022-43450

CVE-2022-43450

Description

Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through 3.9.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Xwp/Stream
cpe:2.3:a:xwp:stream:*:*:*:*:*:wordpress:*:*
Range: <=3.9.2
WordPress/Streamllm-fuzzy
Range: <=3.9.2

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/stream/wordpress-stream-plugin-3-9-2-auth-insecure-direct-object-references-idor-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.