SStreamWeasels

Products

Exploited and recent CVEs

• CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
• CVE-2025-9442 Medium 6.4 StreamWeasels Kick Integration <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via vodsChannel Parameter 0.3%
• CVE-2025-7811 Medium 6.4 StreamWeasels YouTube Integration <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2025-7809 Medium 6.4 StreamWeasels Twitch Integration <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2025-7810 Medium 5.4 StreamWeasels Kick Integration <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2025-5589 Medium 6.4 StreamWeasels Kick Integration <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via status-classic-offline-text Parameter 0.3%
• CVE-2024-11788 Medium 6.4 StreamWeasels YouTube Integration <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-10185 Medium 6.4 StreamWeasels YouTube Integration <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-youtube-embed Shortcode 0.4%
• CVE-2024-10184 Medium 6.4 SW Kick Integration - Blocks and Shortcodes for Embedding Kick Streams <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-kick-embed Shortcode 0.4%
• CVE-2024-9897 Medium 6.4 StreamWeasels Twitch Integration <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-twitch-embed Shortcode 0.3%
• CVE-2024-32716 Medium 5.3 WordPress StreamWeasels Twitch Integration plugin <= 1.7.8 - API Sensitive Data Exposure vulnerability 0.5%
• CVE-2024-29766 Medium 6.5 WordPress StreamWeasels Twitch Integration plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability 0.4%
• CVE-2023-25464 Medium 5.9 WordPress Twitch Player Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS) 0.4%