Skip to content
WWorld Wide Broadcast Network
Products
| Product | CVEs | Exploited | Latest |
| AVideo | 10 | – | Dec 19, 2025 |
Exploited and recent CVEs
-
CVE-2025-34433
Critical 9.3
AVideo < 20.1 Unauthenticated RCE via Predictable Installation Salt
1.5%
-
CVE-2025-34438
Medium 5.3
AVideo < 20.1 IDOR Arbitrary Video Rotation
0.3%
-
CVE-2025-34437
High 8.7
AVideo < 20.1 IDOR Arbitrary Comment Image Upload
0.4%
-
CVE-2025-34435
High 8.7
AVideo < 20.1 IDOR Arbitrary File Deletion
0.3%
-
CVE-2025-34436
High 8.7
AVideo < 20.1 IDOR Arbitrary File Upload
0.4%
-
CVE-2025-34434
Critical 9.3
AVideo < 20.1 ImageGallery Plugin Unauthenticated File Upload and Deletion
0.5%
-
CVE-2025-34439
Medium 4.8
AVideo < 20.1 Open Redirect via cancelUri Parameter
0.2%
-
CVE-2025-34440
Medium 4.8
AVideo < 20.1 Open Redirect via siteRedirectUri Parameter
0.2%
-
CVE-2025-34442
Medium 6.9
AVideo < 20.1 System Path Disclosure via Public API
0.9%
-
CVE-2025-34441
Medium 6.9
AVideo < 20.1 User Information Disclosure via Public API
0.9%