Wwbn vulnerabilities

Products

• Avideo 354
• Avideo-encoder 10

Newest

• wwbn avideo WWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.php CVE-2026-123486 6.0 MediumNovember 6, 2026
• wwbn avideo-encoder AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles CVE-2026-61575 4.7 MediumOctober 28, 2026
• wwbn avideo-encoder AVideo-Encoder: pre-authentication streamer-login SQL injection CVE-2026-61569 7.5 HighOctober 28, 2026
• wwbn avideo-encoder AVideo-Encoder: missing authentication on control and status endpoints CVE-2026-61571 7.3 HighOctober 28, 2026
• wwbn avideo-encoder AVideo-Encoder: unauthenticated full-response server-side request forgery CVE-2026-61572 8.6 HighOctober 28, 2026
• wwbn avideo-encoder AVideo-Encoder: reflected cross-site scripting in the login interface CVE-2026-61573 6.1 MediumOctober 28, 2026
• wwbn avideo-encoder AVideo-Encoder: unauthenticated command execution through streamer login trust CVE-2026-61567 10.0 CriticalOctober 28, 2026
• wwbn avideo-encoder AVideo-Encoder: unauthenticated installer PHP code injection CVE-2026-61564 10.0 CriticalOctober 28, 2026
• wwbn avideo WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header CVE-2026-116800 6.9 MediumOctober 26, 2026
• wwbn avideo WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering CVE-2026-116139 5.1 MediumOctober 25, 2026
• wwbn avideo WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect CVE-2026-114634 5.3 MediumOctober 22, 2026
• wwbn avideo WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php CVE-2026-114633 7.0 HighOctober 22, 2026
• wwbn avideo WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints CVE-2026-114048 5.1 MediumOctober 21, 2026
• wwbn avideo WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title CVE-2026-105086 9.3 CriticalOctober 4, 2026
• wwbn avideo WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates CVE-2026-105089 9.3 CriticalOctober 4, 2026
• wwbn avideo AVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 Field CVE-2026-100630 5.1 MediumSeptember 26, 2026
• wwbn avideo WWBN AVideo userVerifyEmail.php Unauthenticated Access Control CVE-2026-92915 6.9 MediumSeptember 17, 2026
• wwbn avideo AVideo LoginControl PGP Second Factor Authentication Bypass CVE-2026-92914 8.6 HighSeptember 17, 2026
• wwbn avideo AVideo Weak PRNG Activation Code Authentication Bypass CVE-2026-92913 9.1 CriticalSeptember 17, 2026
• wwbn avideo AVideo Cryptographically Weak PRNG via uniqid Stream Key CVE-2026-92912 8.3 HighSeptember 17, 2026
• wwbn avideo AVideo through 29.0 Missing Authorization via comment API endpoint CVE-2026-92586 5.3 MediumSeptember 16, 2026
• wwbn avideo AVideo through 29.0 Missing Authorization Check via API Like Endpoint CVE-2026-92585 5.3 MediumSeptember 16, 2026
• wwbn avideo AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Header CVE-2026-92584 5.3 MediumSeptember 16, 2026
• wwbn avideo AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter Increment CVE-2026-92583 6.9 MediumSeptember 16, 2026
• wwbn avideo AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypass CVE-2026-92582 7.1 HighSeptember 16, 2026
• wwbn avideo AVideo through 29.0 Like Counter Desynchronization via Array Parameter CVE-2026-92581 5.3 MediumSeptember 16, 2026
• wwbn avideo AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF CVE-2026-92580 8.7 HighSeptember 16, 2026
• wwbn avideo AVideo through 29.0 Broken Access Control via CSRF Exemption Basename Collision CVE-2026-92579 5.3 MediumSeptember 16, 2026
• wwbn avideo WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash CVE-2026-92578 9.2 CriticalSeptember 16, 2026
• wwbn avideo AVideo through 29.0 API get_api_video Broken Access Control via clean_title CVE-2026-92577 8.7 HighSeptember 16, 2026
• wwbn avideo AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL CVE-2026-91967 5.3 MediumSeptember 15, 2026
• wwbn avideo AVideo through 29.0 Unauthenticated SSRF via Host Header CVE-2026-91966 6.9 MediumSeptember 15, 2026
• wwbn avideo WWBN AVideo through 29.0 Broken Access Control via Live Endpoints CVE-2026-91965 8.7 HighSeptember 15, 2026
• wwbn avideo WWBN AVideo Missing Authorization via Playlists_schedules list.json.php CVE-2026-90552 5.3 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via video_from_program API CVE-2026-90551 6.9 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via mediaSession.json.php CVE-2026-90550 6.9 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via videosAndroid.json.php Endpoint CVE-2026-90549 6.9 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization in ImageGallery list.json.php CVE-2026-90548 6.9 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via getBookmarks.json.php CVE-2026-90547 6.9 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via like.json.php CVE-2026-90546 5.3 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via commentAddNew.json.php CVE-2026-90545 5.3 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via videoAddViewCount.json.php CVE-2026-90544 5.3 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authentication via socketMessageLiveOwner.json.php CVE-2026-90543 6.9 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via remindMe.json.php CVE-2026-90542 5.3 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Unauthenticated Information Disclosure via menus.json.php CVE-2026-90541 6.9 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via playListAddVideo.json.php CVE-2026-90540 5.3 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authentication via menuItems.json.php CVE-2026-90539 6.9 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via playlistsFromUser.json.php CVE-2026-90538 6.9 MediumSeptember 12, 2026
• wwbn avideo WWBN AVideo Scheduler sendEmail Missing Authorization via Token CVE-2026-90537 8.8 HighSeptember 12, 2026
• wwbn avideo WWBN AVideo Missing Authorization via adsInfo API Endpoint CVE-2026-90536 6.9 MediumSeptember 12, 2026
• Show olderLoading…