CVE-2026-62030: WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability

Q: Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or other privileges. The network attack vector indicates it can be targeted remotely.

Q: What versions are affected?

StreamCast plugin versions up to and including 2.4.5 are affected.

Q: What is the potential impact?

Successful exploitation can cause the affected server to make requests chosen by an attacker. The supplied severity vector indicates low confidentiality and integrity impact, no availability impact, and a changed scope.

Published Oct 10, 2026

Updated

Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.

Affected Software

1 affected component

WordPress StreamCast plugin<=2.4.5

Event History

Oct 10, 2026

CVE Published

via MITRE·07:35 PM

Data Sourced

via MITRE·07:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or other privileges. The network attack vector indicates it can be targeted remotely.

What versions are affected?

StreamCast plugin versions up to and including 2.4.5 are affected.

What is the potential impact?

Successful exploitation can cause the affected server to make requests chosen by an attacker. The supplied severity vector indicates low confidentiality and integrity impact, no availability impact, and a changed scope.

CVE-2026-62030: WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What versions are affected?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What versions are affected?

What is the potential impact?