Unauthenticated Server Side Request Forgery in StreamCast Plugin by WordPress
CVE-2026-62030

7.2HIGH

Key Information:

Vendor

WordPress
Status
Streamcast
Vendor
CVE Published:
10 October 2026

What is CVE-2026-62030?

The StreamCast plugin for WordPress versions up to 2.4.5 contains an unauthenticated Server Side Request Forgery (SSRF) vulnerability that may allow attackers to send requests from the server to internal resources. This flaw can potentially lead to exposure of sensitive information and other security risks. Proper caution and timely updates are recommended to mitigate the effects of this vulnerability.

Affected Version(s)

StreamCast <= 2.4.5

References

https://patchstack.com/database/wordpress/plugin/streamca...
vdb-entry

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Asim Alshaya | Patchstack Bug Bounty Program
.