Streamit vulnerabilities
We track 2 vulnerabilities in Streamit products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Streamit vulnerabilities
- 9.8 Critical severity
Streamit: Improper Control of Generation of Code
The Streamit WordPress plugin before 1.3.10 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated a
- 9.8 Critical severity
Streamit: Improper Control of Generation of Code
The Streamit WordPress theme before 4.5.2 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated att