WW
Vendor
WWBN
351
CVEs
0
On KEV
7
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116800 New | AV AVideo WWBN | 6.2 | Oct 26 | WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header |
| CVE-2026-116139 New | AV AVideo WWBN | 5.4 | Oct 25 | WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering |
| CVE-2026-114634 New | AV AVideo WWBN | 4.3 | Oct 22 | WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect |
| CVE-2026-114633 New | AV AVideo WWBN | 6.5 | Oct 22 | WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php |
| CVE-2026-114048 | AV AVideo WWBN | 3.5 | Oct 21 | WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints |
| CVE-2026-105086 | AV AVideo WWBN | 8.7 | Oct 4 | WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title |
| CVE-2026-105089 | AV AVideo WWBN | 8.7 | Oct 4 | WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates |
| CVE-2026-100630 | AV AVideo WWBN | 5.4 | Sep 26 | AVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 Field |
| CVE-2026-92915 | AV AVideo WWBN | 7.3 | Sep 17 | WWBN AVideo userVerifyEmail.php Unauthenticated Access Control |
| CVE-2026-92914 | AV AVideo WWBN | 8.1 | Sep 17 | AVideo LoginControl PGP Second Factor Authentication Bypass |
| CVE-2026-92913 | AV AVideo WWBN | 7.4 | Sep 17 | AVideo Weak PRNG Activation Code Authentication Bypass |
| CVE-2026-92912 | AV AVideo WWBN | 6.5 | Sep 17 | AVideo Cryptographically Weak PRNG via uniqid Stream Key |
| CVE-2026-92586 | AV AVideo WWBN | 4.3 | Sep 16 | AVideo through 29.0 Missing Authorization via comment API endpoint |
| CVE-2026-92585 | AV AVideo WWBN | 4.3 | Sep 16 | AVideo through 29.0 Missing Authorization Check via API Like Endpoint |
| CVE-2026-92584 | AV AVideo WWBN | 6.1 | Sep 16 | AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Header |
| CVE-2026-92583 | AV AVideo WWBN | 6.5 | Sep 16 | AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter Increment |
| CVE-2026-92582 | AV AVideo WWBN | 7.1 | Sep 16 | AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypass |
| CVE-2026-92581 | AV AVideo WWBN | 4.3 | Sep 16 | AVideo through 29.0 Like Counter Desynchronization via Array Parameter |
| CVE-2026-92580 | AV AVideo WWBN | 8.8 | Sep 16 | AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF |
| CVE-2026-92579 | AV AVideo WWBN | 5.4 | Sep 16 | AVideo through 29.0 Broken Access Control via CSRF Exemption Basename Collision |
| CVE-2026-92578 | AV AVideo WWBN | 8.1 | Sep 16 | WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash |
| CVE-2026-92577 | AV AVideo WWBN | 7.5 | Sep 16 | AVideo through 29.0 API get_api_video Broken Access Control via clean_title |
| CVE-2026-91967 | AV AVideo WWBN | 5.0 | Sep 15 | AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL |
| CVE-2026-91966 | AV AVideo WWBN | 5.8 | Sep 15 | AVideo through 29.0 Unauthenticated SSRF via Host Header |
| CVE-2026-91965 | AV AVideo WWBN | 7.5 | Sep 15 | WWBN AVideo through 29.0 Broken Access Control via Live Endpoints |
| CVE-2026-90552 | AV AVideo WWBN | 4.3 | Sep 12 | WWBN AVideo Missing Authorization via Playlists_schedules list.json.php |
| CVE-2026-90551 | AV AVideo WWBN | 5.3 | Sep 12 | WWBN AVideo Missing Authorization via video_from_program API |
| CVE-2026-90550 | AV AVideo WWBN | 5.3 | Sep 12 | WWBN AVideo Missing Authorization via mediaSession.json.php |
| CVE-2026-90549 | AV AVideo WWBN | 5.3 | Sep 12 | WWBN AVideo Missing Authorization via videosAndroid.json.php Endpoint |
| CVE-2026-90548 | AV AVideo WWBN | 5.3 | Sep 12 | WWBN AVideo Missing Authorization in ImageGallery list.json.php |
| CVE-2026-90547 | AV AVideo WWBN | 5.3 | Sep 12 | WWBN AVideo Missing Authorization via getBookmarks.json.php |
| CVE-2026-90546 | AV AVideo WWBN | 4.3 | Sep 12 | WWBN AVideo Missing Authorization via like.json.php |
| CVE-2026-90545 | AV AVideo WWBN | 4.3 | Sep 12 | WWBN AVideo Missing Authorization via commentAddNew.json.php |
| CVE-2026-90544 | AV AVideo WWBN | 4.3 | Sep 12 | WWBN AVideo Missing Authorization via videoAddViewCount.json.php |
| CVE-2026-90543 | AV AVideo WWBN | 5.3 | Sep 12 | WWBN AVideo Missing Authentication via socketMessageLiveOwner.json.php |
| CVE-2026-90542 | AV AVideo WWBN | 5.4 | Sep 12 | WWBN AVideo Missing Authorization via remindMe.json.php |
| CVE-2026-90541 | AV AVideo WWBN | 5.3 | Sep 12 | WWBN AVideo Unauthenticated Information Disclosure via menus.json.php |
| CVE-2026-90540 | AV AVideo WWBN | 4.3 | Sep 12 | WWBN AVideo Missing Authorization via playListAddVideo.json.php |
| CVE-2026-90539 | AV AVideo WWBN | 5.3 | Sep 12 | WWBN AVideo Missing Authentication via menuItems.json.php |
| CVE-2026-90538 | AV AVideo WWBN | 5.3 | Sep 12 | WWBN AVideo Missing Authorization via playlistsFromUser.json.php |
| CVE-2026-90537 | AV AVideo WWBN | 8.2 | Sep 12 | WWBN AVideo Scheduler sendEmail Missing Authorization via Token |
| CVE-2026-90536 | AV AVideo WWBN | 5.3 | Sep 12 | WWBN AVideo Missing Authorization via adsInfo API Endpoint |
| CVE-2026-89257 | AV AVideo WWBN | 5.4 | Sep 11 | AVideo through 29.0 Cross-User Category Asset Deletion via Missing Ownership Check |
| CVE-2026-89256 | AV AVideo WWBN | 8.7 | Sep 11 | AVideo Bookmark Plugin Stored XSS via Chapter Names |
| CVE-2026-89255 | AV AVideo WWBN | 8.7 | Sep 11 | AVideo LoginControl Stored XSS via PGP Public Key |
| CVE-2026-89254 | AV AVideo WWBN | 8.7 | Sep 11 | AVideo CustomizeUser Stored XSS via field_name Parameter |
| CVE-2026-89253 | AV AVideo WWBN | 8.7 | Sep 11 | AVideo Stored XSS via donationLink in watch page button |
| CVE-2026-89252 | AV AVideo WWBN | 6.5 | Sep 11 | AVideo Missing Authorization in addLiveLink.php LiveLink Update |
| CVE-2026-89251 | AV AVideo WWBN | 6.5 | Sep 11 | AVideo Missing Authorization via AD_Server log.php Wallet Credit |
| CVE-2026-89250 | AV AVideo WWBN | 7.5 | Sep 11 | WWBN AVideo Unauthenticated File Read via getRecordedFile.php |
| CVE-2026-89249 | AV AVideo WWBN | 8.7 | Sep 11 | AVideo YPTWallet Stored XSS via CryptoWallet Configuration |
| CVE-2026-89248 | AV AVideo WWBN | 5.3 | Sep 11 | AVideo WebRTC Plugin Information Disclosure via status.json.php |
| CVE-2026-89247 | AV AVideo WWBN | 6.1 | Sep 11 | WWBN AVideo XML Injection via plugin/AD_Server/VMAP.php |
| CVE-2026-89246 | AV AVideo WWBN | 5.4 | Sep 11 | WWBN AVideo CSV Formula Injection via myComments.download.php |
| CVE-2026-89245 | AV AVideo WWBN | 6.5 | Sep 11 | WWBN AVideo Cross-Site Request Forgery via playlistRemove.php |
| CVE-2026-89244 | AV AVideo WWBN | 6.1 | Sep 11 | WWBN AVideo Reflected XSS via Gallery Category getBackURL |
| CVE-2026-89243 | AV AVideo WWBN | 8.1 | Sep 11 | WWBN AVideo Stored XSS via UserGroups setGroup_name |
| CVE-2026-89242 | AV AVideo WWBN | 7.2 | Sep 11 | WWBN AVideo Unauthenticated SSRF via login.json.php |
| CVE-2026-89241 | AV AVideo WWBN | 6.1 | Sep 11 | WWBN AVideo Reflected XSS via confirmLivePassword.php |
| CVE-2026-89240 | AV AVideo WWBN | 6.1 | Sep 11 | WWBN AVideo Reflected XSS via confirmLivePassword.php |