WWBN AVideo

• CVE-2026-116800 Medium 6.2 WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header 0.5%
• CVE-2026-116139 Medium 5.4 WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering 0.2%
• CVE-2026-114634 Medium 4.3 WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect 0.2%
• CVE-2026-114633 Medium 6.5 WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php 0.4%
• CVE-2026-114048 Low 3.5 WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints 0.2%
• CVE-2026-105086 High 8.7 WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title 0.3%
• CVE-2026-105089 High 8.7 WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates 0.3%
• CVE-2026-100630 Medium 5.4 AVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 Field 0.3%
• CVE-2026-92915 High 7.3 WWBN AVideo userVerifyEmail.php Unauthenticated Access Control 0.4%
• CVE-2026-92914 High 8.1 AVideo LoginControl PGP Second Factor Authentication Bypass 0.5%
• CVE-2026-92913 High 7.4 AVideo Weak PRNG Activation Code Authentication Bypass 0.5%
• CVE-2026-92912 Medium 6.5 AVideo Cryptographically Weak PRNG via uniqid Stream Key 0.3%
• CVE-2026-92586 Medium 4.3 AVideo through 29.0 Missing Authorization via comment API endpoint 0.3%
• CVE-2026-92585 Medium 4.3 AVideo through 29.0 Missing Authorization Check via API Like Endpoint 0.3%
• CVE-2026-92584 Medium 6.1 AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Header 0.3%
• CVE-2026-92583 Medium 6.5 AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter Increment 0.3%
• CVE-2026-92582 High 7.1 AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypass 0.2%
• CVE-2026-92581 Medium 4.3 AVideo through 29.0 Like Counter Desynchronization via Array Parameter 0.3%
• CVE-2026-92580 High 8.8 AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF 1.4%
• CVE-2026-92579 Medium 5.4 AVideo through 29.0 Broken Access Control via CSRF Exemption Basename Collision 0.3%
• CVE-2026-92578 High 8.1 WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash 0.6%
• CVE-2026-92577 High 7.5 AVideo through 29.0 API get_api_video Broken Access Control via clean_title 0.4%
• CVE-2026-91967 Medium 5.0 AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL 0.3%
• CVE-2026-91966 Medium 5.8 AVideo through 29.0 Unauthenticated SSRF via Host Header 0.4%
• CVE-2026-91965 High 7.5 WWBN AVideo through 29.0 Broken Access Control via Live Endpoints 0.5%
• CVE-2026-90552 Medium 4.3 WWBN AVideo Missing Authorization via Playlists_schedules list.json.php 0.4%
• CVE-2026-90551 Medium 5.3 WWBN AVideo Missing Authorization via video_from_program API 0.4%
• CVE-2026-90550 Medium 5.3 WWBN AVideo Missing Authorization via mediaSession.json.php 0.4%
• CVE-2026-90549 Medium 5.3 WWBN AVideo Missing Authorization via videosAndroid.json.php Endpoint 0.3%
• CVE-2026-90548 Medium 5.3 WWBN AVideo Missing Authorization in ImageGallery list.json.php 0.4%
• CVE-2026-90547 Medium 5.3 WWBN AVideo Missing Authorization via getBookmarks.json.php 0.4%
• CVE-2026-90546 Medium 4.3 WWBN AVideo Missing Authorization via like.json.php 0.4%
• CVE-2026-90545 Medium 4.3 WWBN AVideo Missing Authorization via commentAddNew.json.php 0.3%
• CVE-2026-90544 Medium 4.3 WWBN AVideo Missing Authorization via videoAddViewCount.json.php 0.3%
• CVE-2026-90543 Medium 5.3 WWBN AVideo Missing Authentication via socketMessageLiveOwner.json.php 0.6%
• CVE-2026-90542 Medium 5.4 WWBN AVideo Missing Authorization via remindMe.json.php 0.2%
• CVE-2026-90541 Medium 5.3 WWBN AVideo Unauthenticated Information Disclosure via menus.json.php 0.4%
• CVE-2026-90540 Medium 4.3 WWBN AVideo Missing Authorization via playListAddVideo.json.php 0.3%
• CVE-2026-90539 Medium 5.3 WWBN AVideo Missing Authentication via menuItems.json.php 0.4%
• CVE-2026-90538 Medium 5.3 WWBN AVideo Missing Authorization via playlistsFromUser.json.php 0.4%
• CVE-2026-90537 High 8.2 WWBN AVideo Scheduler sendEmail Missing Authorization via Token 0.4%
• CVE-2026-90536 Medium 5.3 WWBN AVideo Missing Authorization via adsInfo API Endpoint 0.4%
• CVE-2026-89257 Medium 5.4 AVideo through 29.0 Cross-User Category Asset Deletion via Missing Ownership Check 0.3%
• CVE-2026-89256 High 8.7 AVideo Bookmark Plugin Stored XSS via Chapter Names 0.4%
• CVE-2026-89255 High 8.7 AVideo LoginControl Stored XSS via PGP Public Key 0.4%
• CVE-2026-89254 High 8.7 AVideo CustomizeUser Stored XSS via field_name Parameter 0.4%
• CVE-2026-89253 High 8.7 AVideo Stored XSS via donationLink in watch page button 0.4%
• CVE-2026-89252 Medium 6.5 AVideo Missing Authorization in addLiveLink.php LiveLink Update 0.3%
• CVE-2026-89251 Medium 6.5 AVideo Missing Authorization via AD_Server log.php Wallet Credit 0.2%
• CVE-2026-89250 High 7.5 WWBN AVideo Unauthenticated File Read via getRecordedFile.php 0.5%