Streamit vulnerabilities

CVEs whose affected-version data names the Streamit package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-13423Critical· 9.8

3mo ago

Streamit < 4.5.2 - Unauthenticated Remote Code Execution via Arbitrary Function Call

The Streamit WordPress theme before 4.5.2 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allow…

▾ MidnightEPSS 0.96%via CVEORG