StreamTube Core vulnerabilities

1 known vulnerability in StreamTube Core from Phpface. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  StreamTube Core: Authorization Bypass Through User-Controlled Key

  CVE-2025-13615Nov 30, 2025Phpface

  The StreamTube Core plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 4.78. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resour