Ttv Easy Embed Player Vulnerabilities

[en] Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Twitch Player: from n/a through <= 2.1.3.

Affected:

up to 2.1.3

Fix:

No patched version reported

Disclosed:

Dec 24, 2025

CVE-2025-68565 on NVD →

The Twitch Player plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.1.3. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.1.3

Fix:

No patched version reported

Disclosed:

Dec 19, 2025

CVE-2025-68565 on NVD →

[en] Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in StreamWeasels Twitch Player plugin <= 2.1.0 versions.

Affected:

up to 2.1.1

Fixed in:

2.1.1

Disclosed:

Apr 7, 2023

CVE-2023-25464 on NVD →

The Twitch Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘swti_options_player[swti_player_welcome_bg_colour]’, 'swti_options_player[swti_player_welcome_image]', 'swti_options_player[swti_player_welcome_logo]', 'swti_options_player[swti_player_welcome_text]', 'swti_options_player[swti_...

CVSS:

4.8

Affected:

up to 2.1.0

Fixed in:

2.1.1

Disclosed:

Feb 13, 2023

CVE-2023-25464 on NVD →