Skip to contentWwbn Avideo vulnerabilities
- wwbn avideoWWBN AVideo 29.1.0 through 29.7.1 Stored XSS via Channel RSS FeedCVE-2026-1268105.1 Medium
- wwbn avideoWWBN AVideo through 29.7.1 Missing Authorization via objects/import.json.phpCVE-2026-1268096.1 Medium
- wwbn avideoWWBN AVideo 14.3 through 29.7.1 Stored XSS via Video Source TagCVE-2026-1268069.3 Critical
- wwbn avideoWWBN AVideo through 29.7.1 Privilege Escalation via Encoder video_id_hashCVE-2026-1268058.6 High
- wwbn avideoWWBN AVideo 12.4 through 29.7.1 Path Traversal File Deletion via deleteImage.json.phpCVE-2026-1268047.2 High
- wwbn avideoWWBN AVideo through 29.7.1 Missing Authorization via get_api_tags APICVE-2026-1265455.3 Medium
- wwbn avideoWWBN AVideo 6.5 through 29.7.1 Email Verification Bypass via User::verifyCode()CVE-2026-1265445.3 Medium
- wwbn avideoWWBN AVideo through 29.7.1 Wallet Credit Manipulation via PayPalYPT ipnV2.phpCVE-2026-1265438.7 High
- wwbn avideoWWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social LoginCVE-2026-1265429.3 Critical
- wwbn avideoWWBN AVideo through 29.7.1 Missing Authorization via Live Restream EndpointsCVE-2026-1265418.6 High
- wwbn avideoWWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.phpCVE-2026-1244247.1 High
- wwbn avideoWWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.phpCVE-2026-1234866.0 Medium
- wwbn avideo-encoderAVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titlesCVE-2026-615754.7 Medium
- wwbn avideo-encoderAVideo-Encoder: pre-authentication streamer-login SQL injectionCVE-2026-615697.5 High
- wwbn avideo-encoderAVideo-Encoder: missing authentication on control and status endpointsCVE-2026-615717.3 High
- wwbn avideo-encoderAVideo-Encoder: unauthenticated full-response server-side request forgeryCVE-2026-615728.6 High
- wwbn avideo-encoderAVideo-Encoder: reflected cross-site scripting in the login interfaceCVE-2026-615736.1 Medium
- wwbn avideo-encoderAVideo-Encoder: unauthenticated command execution through streamer login trustCVE-2026-6156710.0 Critical
- wwbn avideo-encoderAVideo-Encoder: unauthenticated installer PHP code injectionCVE-2026-6156410.0 Critical
- wwbn avideoWWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language HeaderCVE-2026-1168006.9 Medium
- wwbn avideoWWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown RenderingCVE-2026-1161395.1 Medium
- wwbn avideoWWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL RedirectCVE-2026-1146345.3 Medium
- wwbn avideoWWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.phpCVE-2026-1146337.0 High
- wwbn avideoWWBN AVideo before 24.0 CSRF via Legacy Playlist and Video EndpointsCVE-2026-1140485.1 Medium
- wwbn avideoWWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video TitleCVE-2026-1050869.3 Critical
- wwbn avideoWWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 TemplatesCVE-2026-1050899.3 Critical
- wwbn avideoAVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 FieldCVE-2026-1006305.1 Medium
- wwbn avideoWWBN AVideo userVerifyEmail.php Unauthenticated Access ControlCVE-2026-929156.9 Medium
- wwbn avideoAVideo LoginControl PGP Second Factor Authentication BypassCVE-2026-929148.6 High
- wwbn avideoAVideo Weak PRNG Activation Code Authentication BypassCVE-2026-929139.1 Critical
- wwbn avideoAVideo Cryptographically Weak PRNG via uniqid Stream KeyCVE-2026-929128.3 High
- wwbn avideoAVideo through 29.0 Missing Authorization via comment API endpointCVE-2026-925865.3 Medium
- wwbn avideoAVideo through 29.0 Missing Authorization Check via API Like EndpointCVE-2026-925855.3 Medium
- wwbn avideoAVideo through 29.0 Stored Cross-Site Scripting via User-Agent HeaderCVE-2026-925845.3 Medium
- wwbn avideoAVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter IncrementCVE-2026-925836.9 Medium
- wwbn avideoAVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF BypassCVE-2026-925827.1 High
- wwbn avideoAVideo through 29.0 Like Counter Desynchronization via Array ParameterCVE-2026-925815.3 Medium
- wwbn avideoAVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRFCVE-2026-925808.7 High
- wwbn avideoAVideo through 29.0 Broken Access Control via CSRF Exemption Basename CollisionCVE-2026-925795.3 Medium
- wwbn avideoWWBN AVideo through 29.0 Authentication Bypass via Stored Password HashCVE-2026-925789.2 Critical
- wwbn avideoAVideo through 29.0 API get_api_video Broken Access Control via clean_titleCVE-2026-925778.7 High
- wwbn avideoAVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURLCVE-2026-919675.3 Medium
- wwbn avideoAVideo through 29.0 Unauthenticated SSRF via Host HeaderCVE-2026-919666.9 Medium
- wwbn avideoWWBN AVideo through 29.0 Broken Access Control via Live EndpointsCVE-2026-919658.7 High
- wwbn avideoWWBN AVideo Missing Authorization via Playlists_schedules list.json.phpCVE-2026-905525.3 Medium
- wwbn avideoWWBN AVideo Missing Authorization via video_from_program APICVE-2026-905516.9 Medium
- wwbn avideoWWBN AVideo Missing Authorization via mediaSession.json.phpCVE-2026-905506.9 Medium
- wwbn avideoWWBN AVideo Missing Authorization via videosAndroid.json.php EndpointCVE-2026-905496.9 Medium
- wwbn avideoWWBN AVideo Missing Authorization in ImageGallery list.json.phpCVE-2026-905486.9 Medium
- wwbn avideoWWBN AVideo Missing Authorization via getBookmarks.json.phpCVE-2026-905476.9 Medium
- Show olderLoading…