unknown streamit vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 9.8CVE-2026-126119EPSS 0.2%2026-11-13

   The Streamit WordPress plugin before 1.3.10 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allow…