CVE-2026-39527 | sc Internet Vivoo WpStream Plugin up to 4.11.1 on WordPress unrestricted upload

A vulnerability was found in sc Internet Vivoo WpStream Plugin up to 4.11.1 on WordPress. It has been rated as critical. Impacted is an unknown function. This manipulation causes unrestricted upload.

This vulnerability is registered as CVE-2026-39527. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.