WWBN AVideo

• CVE-2026-89249 High 8.7 AVideo YPTWallet Stored XSS via CryptoWallet Configuration 0.4%
• CVE-2026-89248 Medium 5.3 AVideo WebRTC Plugin Information Disclosure via status.json.php 0.5%
• CVE-2026-89247 Medium 6.1 WWBN AVideo XML Injection via plugin/AD_Server/VMAP.php 0.4%
• CVE-2026-89246 Medium 5.4 WWBN AVideo CSV Formula Injection via myComments.download.php 0.2%
• CVE-2026-89245 Medium 6.5 WWBN AVideo Cross-Site Request Forgery via playlistRemove.php 0.2%
• CVE-2026-89244 Medium 6.1 WWBN AVideo Reflected XSS via Gallery Category getBackURL 0.3%
• CVE-2026-89243 High 8.1 WWBN AVideo Stored XSS via UserGroups setGroup_name 0.4%
• CVE-2026-89242 High 7.2 WWBN AVideo Unauthenticated SSRF via login.json.php 0.3%
• CVE-2026-89241 Medium 6.1 WWBN AVideo Reflected XSS via confirmLivePassword.php 0.3%
• CVE-2026-89240 Medium 6.1 WWBN AVideo Reflected XSS via confirmLivePassword.php 0.3%
• CVE-2026-89239 Medium 6.1 WWBN AVideo Reflected XSS via Referer Header Comment Breakout 0.3%
• CVE-2026-89148 Medium 5.4 AVideo Open Redirect via playlistSort.php Referer Header 0.2%
• CVE-2026-88876 High 7.5 AVideo PlayerSkins seo.php Missing Authorization Password-Protected VOD 0.4%
• CVE-2026-88875 Medium 4.3 AVideo Incomplete API Sanitization Information Disclosure 0.3%
• CVE-2026-88874 High 7.5 AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication Bypass 0.5%
• CVE-2026-88873 High 7.1 WWBN AVideo Cross-Site Request Forgery via logArchive.json.php 0.2%
• CVE-2026-88872 High 7.1 AVideo CustomizeUser setPassword.json.php CSRF 0.2%
• CVE-2026-88871 Medium 4.3 WWBN AVideo CustomizeUser setSubscribers CSRF via GET 0.2%
• CVE-2026-88870 High 7.1 WWBN AVideo LoginControl PGP Key CSRF via GET Request 0.2%
• CVE-2026-88869 Critical 9.3 AVideo AD_Server Stored XSS via log.php label parameter 0.5%
• CVE-2026-88868 High 8.7 AVideo LiveLinks Stored XSS via title and description fields 0.4%
• CVE-2026-88867 High 8.7 WWBN AVideo Stored XSS via Category Name and Icon Class 0.4%
• CVE-2026-88866 High 8.7 WWBN AVideo LoginControl Stored XSS via User-Agent Header 0.4%
• CVE-2026-88865 High 8.1 AVideo Missing Authorization via getRestream.json.php 0.4%
• CVE-2026-86729 High 7.4 WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize 0.4%
• CVE-2026-86728 High 7.5 AVideo through 29.0 Unauthenticated Disclosure via epg.json.php 0.6%
• CVE-2026-86727 High 7.5 AVideo through 29.0 Information Disclosure via stats.json.php 0.5%
• CVE-2026-86726 Medium 6.5 AVideo through 29.0 Information Disclosure via restreamsActive.json.php 0.4%
• CVE-2026-86725 High 7.1 AVideo SocialMediaPublisher Missing Authorization via add.json.php 0.4%
• CVE-2026-86724 Medium 6.5 AVideo YPTWallet saveBalance.php Cross-Site Request Forgery 0.2%
• CVE-2026-86723 High 8.1 AVideo LoginControl PGP Authentication Bypass via verifyChallenge 0.5%
• CVE-2026-86722 High 8.1 AVideo Authentication Bypass via SQL Cache Invalidation 0.5%
• CVE-2026-86721 High 7.5 AVideo through c3edcc274c Authorization Bypass via Session Cookie 0.5%
• CVE-2026-86720 High 8.1 WWBN AVideo Missing Authorization via resendRestreamer.json.php 0.4%
• CVE-2026-86719 Medium 5.4 WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking 0.1%
• CVE-2026-86718 High 7.1 WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.php 0.2%
• CVE-2026-86190 Critical 9.1 WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter 0.4%
• CVE-2026-86189 Critical 9.8 WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php 0.7%
• CVE-2026-86188 High 7.2 AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting 0.4%
• CVE-2026-86187 Medium 5.9 WWBN AVideo Weak PRNG Password Generation via External Login 0.4%
• CVE-2026-86186 Medium 6.5 AVideo API Rate Limit Bypass via Bot User-Agent Header 0.3%
• CVE-2026-85577 Medium 5.4 AVideo userLogin.php Reflected XSS via error parameter 0.3%
• CVE-2026-85164 High 7.1 WWBN AVideo Server-Side Request Forgery via set_api_userImages 0.3%
• CVE-2026-85163 Medium 6.5 AVideo Server-Side Request Forgery via epg_link parameter 0.4%
• CVE-2026-85162 Medium 6.5 AVideo through c91b5975d CSRF via saveLive.php 0.2%
• CVE-2026-85161 Medium 4.3 AVideo removePoster.php Cross-Site Request Forgery File Deletion 0.1%
• CVE-2026-85160 High 8.1 AVideo through c91b5975d CSRF and Path Traversal via stopLive.php 0.4%
• CVE-2026-85159 Medium 5.4 AVideo Reflected XSS via cancelUri in userLogin.php 0.3%
• CVE-2026-85158 Medium 5.4 AVideo Reflected XSS via videoEmbeded.php link parameter 0.3%
• CVE-2026-85157 Medium 5.3 WWBN AVideo Broken Access Control via feed/index.php program_id 0.3%