CVE-2026-39527

MediumCVSS 5.4

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile — higher than 21% of all known CVEs

WpStream versions below 4.11.2 have a vulnerability allowing subscribers to upload arbitrary files.

This vulnerability may lead to unauthorized access to the system and potential introduction of malicious software.

It is recommended to update WpStream to version 4.11.2 or newer to mitigate this vulnerability.

Original NVD description (English source)

Subscriber Arbitrary File Upload in WpStream < 4.11.2 versions.