Skip to contentWwbn Avideo vulnerabilities
- wwbn avideoWWBN AVideo Missing Authorization via like.json.phpCVE-2026-905465.3 Medium
- wwbn avideoWWBN AVideo Missing Authorization via commentAddNew.json.phpCVE-2026-905455.3 Medium
- wwbn avideoWWBN AVideo Missing Authorization via videoAddViewCount.json.phpCVE-2026-905445.3 Medium
- wwbn avideoWWBN AVideo Missing Authentication via socketMessageLiveOwner.json.phpCVE-2026-905436.9 Medium
- wwbn avideoWWBN AVideo Missing Authorization via remindMe.json.phpCVE-2026-905425.3 Medium
- wwbn avideoWWBN AVideo Unauthenticated Information Disclosure via menus.json.phpCVE-2026-905416.9 Medium
- wwbn avideoWWBN AVideo Missing Authorization via playListAddVideo.json.phpCVE-2026-905405.3 Medium
- wwbn avideoWWBN AVideo Missing Authentication via menuItems.json.phpCVE-2026-905396.9 Medium
- wwbn avideoWWBN AVideo Missing Authorization via playlistsFromUser.json.phpCVE-2026-905386.9 Medium
- wwbn avideoWWBN AVideo Scheduler sendEmail Missing Authorization via TokenCVE-2026-905378.8 High
- wwbn avideoWWBN AVideo Missing Authorization via adsInfo API EndpointCVE-2026-905366.9 Medium
- wwbn avideoAVideo through 29.0 Cross-User Category Asset Deletion via Missing Ownership CheckCVE-2026-892575.3 Medium
- wwbn avideoAVideo Bookmark Plugin Stored XSS via Chapter NamesCVE-2026-892569.3 Critical
- wwbn avideoAVideo LoginControl Stored XSS via PGP Public KeyCVE-2026-892559.3 Critical
- wwbn avideoAVideo CustomizeUser Stored XSS via field_name ParameterCVE-2026-892549.3 Critical
- wwbn avideoAVideo Stored XSS via donationLink in watch page buttonCVE-2026-892539.3 Critical
- wwbn avideoAVideo Missing Authorization in addLiveLink.php LiveLink UpdateCVE-2026-892527.1 High
- wwbn avideoAVideo Missing Authorization via AD_Server log.php Wallet CreditCVE-2026-892517.1 High
- wwbn avideoWWBN AVideo Unauthenticated File Read via getRecordedFile.phpCVE-2026-892508.7 High
- wwbn avideoAVideo YPTWallet Stored XSS via CryptoWallet ConfigurationCVE-2026-892499.3 Critical
- wwbn avideoAVideo WebRTC Plugin Information Disclosure via status.json.phpCVE-2026-892486.9 Medium
- wwbn avideoWWBN AVideo XML Injection via plugin/AD_Server/VMAP.phpCVE-2026-892475.3 Medium
- wwbn avideoWWBN AVideo CSV Formula Injection via myComments.download.phpCVE-2026-892465.1 Medium
- wwbn avideoWWBN AVideo Cross-Site Request Forgery via playlistRemove.phpCVE-2026-892457.1 High
- wwbn avideoWWBN AVideo Reflected XSS via Gallery Category getBackURLCVE-2026-892445.3 Medium
- wwbn avideoWWBN AVideo Stored XSS via UserGroups setGroup_nameCVE-2026-892439.2 Critical
- wwbn avideoWWBN AVideo Unauthenticated SSRF via login.json.phpCVE-2026-892426.9 Medium
- wwbn avideoWWBN AVideo Reflected XSS via confirmLivePassword.phpCVE-2026-892415.3 Medium
- wwbn avideoWWBN AVideo Reflected XSS via confirmLivePassword.phpCVE-2026-892405.3 Medium
- wwbn avideoWWBN AVideo Reflected XSS via Referer Header Comment BreakoutCVE-2026-892395.3 Medium
- wwbn avideoAVideo Open Redirect via playlistSort.php Referer HeaderCVE-2026-891485.1 Medium
- wwbn avideoAVideo PlayerSkins seo.php Missing Authorization Password-Protected VODCVE-2026-888768.7 High
- wwbn avideoAVideo Incomplete API Sanitization Information DisclosureCVE-2026-888755.3 Medium
- wwbn avideoAVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication BypassCVE-2026-888748.7 High
- wwbn avideoWWBN AVideo Cross-Site Request Forgery via logArchive.json.phpCVE-2026-888737.1 High
- wwbn avideoAVideo CustomizeUser setPassword.json.php CSRFCVE-2026-888727.1 High
- wwbn avideoWWBN AVideo CustomizeUser setSubscribers CSRF via GETCVE-2026-888715.3 Medium
- wwbn avideoWWBN AVideo LoginControl PGP Key CSRF via GET RequestCVE-2026-888707.1 High
- wwbn avideoAVideo AD_Server Stored XSS via log.php label parameterCVE-2026-888699.3 Critical
- wwbn avideoAVideo LiveLinks Stored XSS via title and description fieldsCVE-2026-888689.3 Critical
- wwbn avideoWWBN AVideo Stored XSS via Category Name and Icon ClassCVE-2026-888679.3 Critical
- wwbn avideoWWBN AVideo LoginControl Stored XSS via User-Agent HeaderCVE-2026-888669.3 Critical
- wwbn avideoAVideo Missing Authorization via getRestream.json.phpCVE-2026-888658.6 High
- wwbn avideoWWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorizeCVE-2026-867299.1 Critical
- wwbn avideoAVideo through 29.0 Unauthenticated Disclosure via epg.json.phpCVE-2026-867288.7 High
- wwbn avideoAVideo through 29.0 Information Disclosure via stats.json.phpCVE-2026-867278.7 High
- wwbn avideoAVideo through 29.0 Information Disclosure via restreamsActive.json.phpCVE-2026-867267.1 High
- wwbn avideoAVideo SocialMediaPublisher Missing Authorization via add.json.phpCVE-2026-867257.1 High
- wwbn avideoAVideo YPTWallet saveBalance.php Cross-Site Request ForgeryCVE-2026-867247.1 High
- wwbn avideoAVideo LoginControl PGP Authentication Bypass via verifyChallengeCVE-2026-867238.6 High
- Show moreLoading…