Description
WordPress Plugin WordPress Social Stream is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently overwrite admin options. WordPress Plugin WordPress Social Stream version 1.5.15 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.5.16 or latest
References
https://www.exploit-db.com/exploits/39946/
http://codecanyon.net/item/wordpress-social-stream/2201708?s_rank=15
Related Vulnerabilities
WordPress Plugin WPGlobus-Multilingual Everything! Multiple Vulnerabilities (1.9.6)
WordPress Plugin AdRoll for WooCommerce Stores Unspecified Vulnerability (2.2.5)
WordPress Plugin StatPress Cross-Site Scripting (1.2.9.1)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.13)
WordPress Plugin WP Rollback Multiple Vulnerabilities (1.2.2)