Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
phpface records in CISA KEVNo phpface vulnerabilities are listed in CISA KEV.
Priority MEDIUM 49
The StreamTube Core plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 4.78.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00397 · Published 2025-11-30 · No fix listed CWE-639
