Skip to content
OpenAdvisories

Product · Iqonic Design

Streamit

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-2525

    Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload

    The Streamit theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'st_Authentication_Controller::edit_profile' function in all versions up to, and including, 4.0.1. This makes it possible for authenticated att…

    Iqonic Design Streamit Web / CMS
  • High 8.8
    CVE-2025-2526

    Streamit <= 4.0.2 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeover

    The Streamit theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like email in the 'st_…

    Iqonic Design Streamit Web / CMS