Phpface vulnerabilities
We track 1 vulnerability in Phpface products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 30, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Phpface vulnerabilities
- 9.8 Critical severity
StreamTube Core: Authorization Bypass Through User-Controlled Key
The StreamTube Core plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 4.78. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resour