Skip to content
OpenAdvisories

Vendor

phpface

1 known vulnerabilities.

Products

StreamTube Core 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-13615

    StreamTube Core <= 4.78 - Unauthenticated Arbitrary User Password Change

    The StreamTube Core plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 4.78. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resou…

    phpface StreamTube Core Web / CMS