streamline vulnerabilities

Products

• CartBounty – Save and recover abandoned carts for WooCommerce 1
• streamline 1

Latest streamline CVEs

Newest publication first

1. CVE-2024-47634 WordPress CartBounty plugin <= 8.2 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2024-10-20

   Critical·CVSS 9.8 EPSS 0.20%

   Cross-Site Request Forgery (CSRF) vulnerability in Streamline CartBounty – Save and recover abandoned carts for WooCommerce woo-save-abandoned-carts allows Cross Site Request Forgery.This issue affects CartBounty – Save and recover abandoned carts for WooCommerce: from n/a throug...

2. CVE-2007-5015 Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP code via a URL in the sl_theme_unix_path parameter to (1) ad...

   Published 2007-09-20

   Medium·CVSS 6.8 EPSS 38.6%

   Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP code via a URL in the sl_theme_unix_path parameter to (1) admin_footer.php, (2) info_footer.php, (3) theme_footer.php, (4) browse_footer.php...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.