Skip to contentWwbn Avideo vulnerabilities
- wwbn avideoWWBN AVideo - Unauthenticated IDOR - Playlist Information DisclosureCVE-2026-30885Fix available5.5 Medium
- wwbn avideoWWBN AVideo: Unauthenticated PHP session store exposed to host network via published memcached portCVE-2026-290938.1 High
- wwbn avideo-encoderAVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.phpCVE-2026-29058Public exploitFix available9.8 Critical
- wwbn avideoWWBN AVideo: Authenticated Remote Code Execution via Unsafe Plugin ZIP ExtractionCVE-2026-28502Fix available9.3 Critical
- wwbn avideoWWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.phpCVE-2026-285019.8 Critical
- wwbn avideoAVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.phpCVE-2026-27732Fix available8.6 High
- wwbn avideoAVideo has Stored Cross-Site Scripting via Markdown Comment InjectionCVE-2026-27568Fix available5.1 Medium
- avideo platform, wwbn avideo +1 moreAVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)CVE-2020-371588.5 High
- avideo platform, wwbn avideo +1 moreAVideo Platform 8.1 - Information Disclosure (User Enumeration)CVE-2020-371738.7 High
- avideo platform, wwbn avideo +1 moreAVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)CVE-2020-371728.5 High
- world wide broadcast network avideoAVideo < 20.1 Unauthenticated RCE via Predictable Installation SaltCVE-2025-34433Public exploit9.3 Critical
- world wide broadcast network avideoAVideo < 20.1 IDOR Arbitrary Video RotationCVE-2025-344385.3 Medium
- world wide broadcast network avideoAVideo < 20.1 IDOR Arbitrary Comment Image UploadCVE-2025-344378.7 High
- world wide broadcast network avideoAVideo < 20.1 IDOR Arbitrary File DeletionCVE-2025-344358.7 High
- world wide broadcast network avideoAVideo < 20.1 IDOR Arbitrary File UploadCVE-2025-344368.7 High
- world wide broadcast network avideoAVideo < 20.1 ImageGallery Plugin Unauthenticated File Upload and DeletionCVE-2025-344349.3 Critical
- world wide broadcast network avideoAVideo < 20.1 Open Redirect via cancelUri ParameterCVE-2025-344394.8 Medium
- world wide broadcast network avideoAVideo < 20.1 Open Redirect via siteRedirectUri ParameterCVE-2025-344404.8 Medium
- world wide broadcast network avideoAVideo < 20.1 System Path Disclosure via Public APICVE-2025-34442Public exploit6.9 Medium
- world wide broadcast network avideoAVideo < 20.1 User Information Disclosure via Public APICVE-2025-34441Public exploit6.9 Medium
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the managerPlaylists PlaylistOwnerUsersId...CVE-2025-464109.6 Critical
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the videosList page parameter functionality...CVE-2025-530849.0 Critical
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the videoNotFound 404ErrorMsg parameter...CVE-2025-501289.6 Critical
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri...CVE-2025-365488.3 High
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the userLogin cancelUri parameter...CVE-2025-414209.6 Critical
- wwbn avideoA race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN...CVE-2025-252148.8 High
- wwbn avideoAn incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit...CVE-2025-487327.3 High
- wwbn avideoAVideo cross-site scripting vulnerability in the view/about.php pageCVE-2024-34899Fix available5.4 Medium
- wwbn avideoWWBN AVideo Remote Code ExecutionCVE-2024-31819Public exploitFix availableEPSS 15.8%9.8 Critical
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path...CVE-2023-471716.5 Medium
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image...CVE-2023-498646.5 Medium
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image...CVE-2023-498636.5 Medium
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image...CVE-2023-498626.5 Medium
- wwbn avideoAn information disclosure vulnerability exists in the image404Raw.php functionality of WWBN...CVE-2023-497387.5 High
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the navbarMenuAndLogo.php user name...CVE-2023-487308.5 High
- wwbn avideoA unrestricted php file upload vulnerability exists in the import.json.php temporary copy...CVE-2023-497154.3 Medium
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName...CVE-2023-487289.6 Critical
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality...CVE-2023-478619.0 Critical
- wwbn avideoAn insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation...CVE-2023-495898.8 High
- wwbn avideoA local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN...CVE-2023-478629.8 Critical
- wwbn avideoWWBN AVideo recovery notification bypass vulnerabilityCVE-2023-501725.3 Medium
- wwbn avideoWWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerabilityCVE-2023-498107.3 High
- wwbn avideoWWBN AVideo Insufficient Entropy vulnerbailityCVE-2023-495999.8 Critical
- wwbn avideoAVideo command injection vulnerabilityCVE-2023-32073Public exploit8.8 High
- wwbn avideoWWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's accountCVE-2023-30860Fix available8.0 High
- wwbn avideoWWBN AVideo vulnerable to OS Command InjectionCVE-2023-30854Public exploitFix available8.8 High
- wwbn avideoCross Site Scripting (XSS) vulnerability in World Wide Broadcast Network AVideo before 12.4,...CVE-2023-253146.1 Medium
- wwbn avideoAVideo contains Command injection when embedding a video linkCVE-2023-25313Fix available9.8 Critical
- wwbn avideoA sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev...CVE-2022-346528.3 High
- wwbn avideoA sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev...CVE-2022-331498.3 High
- Show moreLoading…