Streamweasels

14 CVEs across 6 Streamweasels products. Browse Streamweasels vulnerabilities, severities, and proof-of-concept exploits.

Streamweasels products with known CVEs

ProductCVEs
Streamweasels Twitch Integration6
Streamweasels Kick Integration4
Streamweasels Youtube Integration3
Twitch Integration1
Twitch Player1
Twitch Player1
Streamweasels CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-13362Medium6.12026-05-01Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient inp…
CVE-2025-9442Medium6.42025-09-06The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘vodsChannel’ parameter in all versions up to, and…
CVE-2025-7811Medium6.42025-07-29The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'data-uuid' attribute in all versions…
CVE-2025-7810Medium5.42025-07-29The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'data-uuid' attribute in all versions up…
CVE-2025-7809Medium6.42025-07-29The StreamWeasels Twitch Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'data-uuid' attribute in all versions u…
CVE-2025-5589Medium6.42025-06-14The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘status-classic-offline-text’ parameter in all ver…
CVE-2024-11788Medium6.42024-11-28The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sw-youtube-embed' shortcode in all ve…
CVE-2024-10185Medium6.42024-10-29The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-youtube-embed shortcode in all vers…
CVE-2024-10184Medium6.42024-10-29The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-kick-embed shortcode in all versions u…
CVE-2024-9897Medium6.42024-10-19The StreamWeasels Twitch Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-twitch-embed shortcode in all versio…
CVE-2022-4974Medium6.32024-10-16The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to…
CVE-2024-32716Medium5.32024-04-24Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StreamWeasels StreamWeasels Twitch Integration.This issue affects StreamWeasels Twi…
CVE-2024-29766Medium6.52024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StreamWeasels StreamWeasels Twitch Integration allows Sto…
CVE-2023-25464Medium5.92023-04-07Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in StreamWeasels Twitch Player plugin <= 2.1.0 versions.