WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in WpStream – Live Streaming, Video on Demand, Pay Per View

WpStream is a Video Streaming Plugin that lets you broadcast live events and helps you sell tickets or recordings via WooCommerce.

6Reported vulnerabilities
8.8Highest CVSS score
4.13.2Latest version
3,000+Active installs

What to do now

Update WpStream – Live Streaming, Video on Demand, Pay Per View to 4.11.2 or later. 6 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 10, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2026-39527 High 8.8 0.3% Before 4.11.2 4.11.2 April 17, 2026
CVE-2025-68521 Medium 5.3 0.2% 4.9.5 and earlier 4.9.6 December 29, 2025
CVE-2026-39526 Medium 4.3 0.2% Before 4.11.2 4.11.2 March 11, 2026
CVE-2025-68522 Medium 4.3 0.2% 4.9.5 and earlier 4.9.6 December 30, 2025
CVE-2023-38512 Medium 4.3 0.3% 4.5.4 and earlier 4.5.5 July 20, 2023
CVE-2023-27458 Medium 4.3 0.3% 4.4.10 and earlier 4.4.10.6 March 2, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.