VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Feb 6, 2023· Updated Jun 17, 2026

CVE-2022-4384

CVE-2022-4384

Description

The Stream WordPress plugin before 3.9.2 does not prevent users with little privileges on the site (like subscribers) from using its alert creation functionality, which may enable them to leak sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Xwp/Stream2 versions
    cpe:2.3:a:xwp:stream:*:*:*:*:*:wordpress:*:*+ 1 more
    • cpe:2.3:a:xwp:stream:*:*:*:*:*:wordpress:*:*range: <3.9.2
    • (no CPE)range: 0
  • WordPress/Streamllm-fuzzy
    Range: <3.9.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.