Wwbn vulnerabilities
345 CVEs and advisories name Wwbn as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-126545WWBN AVideo through 29.7.1 Missing Authorization via get_api_tags API
- CVE-2026-126544WWBN AVideo 6.5 through 29.7.1 Email Verification Bypass via User::verifyCode()
- CVE-2026-126543WWBN AVideo through 29.7.1 Wallet Credit Manipulation via PayPalYPT ipnV2.php
- CVE-2026-126542WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social Login
- CVE-2026-126541WWBN AVideo through 29.7.1 Missing Authorization via Live Restream Endpoints
- CVE-2026-124424WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.php
- CVE-2026-123486WWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.php
- CVE-2026-61575AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles
- CVE-2026-61569AVideo-Encoder: pre-authentication streamer-login SQL injection
- CVE-2026-61571AVideo-Encoder: missing authentication on control and status endpoints
- CVE-2026-61572AVideo-Encoder: unauthenticated full-response server-side request forgery
- CVE-2026-61573AVideo-Encoder: reflected cross-site scripting in the login interface
- CVE-2026-61567AVideo-Encoder: unauthenticated command execution through streamer login trust
- CVE-2026-61564AVideo-Encoder: unauthenticated installer PHP code injection
- CVE-2026-116800WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header
- CVE-2026-116139WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering
- CVE-2026-114634WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect
- CVE-2026-114633WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php
- CVE-2026-114048WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints
- CVE-2026-105086WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title
- CVE-2026-105089WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates
- CVE-2026-100630AVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 Field
- CVE-2026-92915WWBN AVideo userVerifyEmail.php Unauthenticated Access Control
- CVE-2026-92914AVideo LoginControl PGP Second Factor Authentication Bypass
- CVE-2026-92913AVideo Weak PRNG Activation Code Authentication Bypass
- CVE-2026-92912AVideo Cryptographically Weak PRNG via uniqid Stream Key
- CVE-2026-92586AVideo through 29.0 Missing Authorization via comment API endpoint
- CVE-2026-92585AVideo through 29.0 Missing Authorization Check via API Like Endpoint
- CVE-2026-92584AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Header
- CVE-2026-92583AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter Increment