WordPress plugin
StreamWeasels Kick Integration security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium4
- Low0
All StreamWeasels Kick Integration vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via vodsChannel Parameter ≤1.1.5Update to 1.1.6 | CVE-2025-9442 | |
| Medium5.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.1.4Update to 1.1.5 | CVE-2025-7810 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via status-classic-offline-text Parameter ≤1.1.3Update to 1.1.4 | CVE-2025-5589 | |
| Medium6.4 | Blocks and Shortcodes for Embedding Kick Streams <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-kick-embed Shortcode ≤1.1.1Update to 1.1.2 | CVE-2024-10184 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via vodsChannel Parameter
≤1.1.5Update to 1.1.6
- Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.1.4Update to 1.1.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via status-classic-offline-text Parameter
≤1.1.3Update to 1.1.4
- Medium6.4Blocks and Shortcodes for Embedding Kick Streams <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-kick-embed Shortcode
≤1.1.1Update to 1.1.2
StreamWeasels Kick Integration: common questions
Does StreamWeasels Kick Integration have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in StreamWeasels Kick Integration: 4 medium. None are known to affect version null.
How do I check which version of StreamWeasels Kick Integration I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent StreamWeasels Kick Integration vulnerability?
CVE-2025-9442, published Sep 5, 2025: StreamWeasels Kick Integration <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via vodsChannel Parameter. Severity: Medium (CVSS 6.4).
Is any StreamWeasels Kick Integration vulnerability listed in CISA KEV?
No. None of the known StreamWeasels Kick Integration vulnerabilities is currently listed in the CISA KEV catalog.