Wwbn vulnerabilities
345 CVEs and advisories name Wwbn as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-92582AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypass
- CVE-2026-92581AVideo through 29.0 Like Counter Desynchronization via Array Parameter
- CVE-2026-92580AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF
- CVE-2026-92579AVideo through 29.0 Broken Access Control via CSRF Exemption Basename Collision
- CVE-2026-92578WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash
- CVE-2026-92577AVideo through 29.0 API get_api_video Broken Access Control via clean_title
- CVE-2026-91967AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL
- CVE-2026-91966AVideo through 29.0 Unauthenticated SSRF via Host Header
- CVE-2026-91965WWBN AVideo through 29.0 Broken Access Control via Live Endpoints
- CVE-2026-90552WWBN AVideo Missing Authorization via Playlists_schedules list.json.php
- CVE-2026-90551WWBN AVideo Missing Authorization via video_from_program API
- CVE-2026-90550WWBN AVideo Missing Authorization via mediaSession.json.php
- CVE-2026-90549WWBN AVideo Missing Authorization via videosAndroid.json.php Endpoint
- CVE-2026-90548WWBN AVideo Missing Authorization in ImageGallery list.json.php
- CVE-2026-90547WWBN AVideo Missing Authorization via getBookmarks.json.php
- CVE-2026-90546WWBN AVideo Missing Authorization via like.json.php
- CVE-2026-90545WWBN AVideo Missing Authorization via commentAddNew.json.php
- CVE-2026-90544WWBN AVideo Missing Authorization via videoAddViewCount.json.php
- CVE-2026-90543WWBN AVideo Missing Authentication via socketMessageLiveOwner.json.php
- CVE-2026-90542WWBN AVideo Missing Authorization via remindMe.json.php
- CVE-2026-90541WWBN AVideo Unauthenticated Information Disclosure via menus.json.php
- CVE-2026-90540WWBN AVideo Missing Authorization via playListAddVideo.json.php
- CVE-2026-90539WWBN AVideo Missing Authentication via menuItems.json.php
- CVE-2026-90538WWBN AVideo Missing Authorization via playlistsFromUser.json.php
- CVE-2026-90537WWBN AVideo Scheduler sendEmail Missing Authorization via Token
- CVE-2026-90536WWBN AVideo Missing Authorization via adsInfo API Endpoint
- CVE-2026-89257AVideo through 29.0 Cross-User Category Asset Deletion via Missing Ownership Check
- CVE-2026-89256AVideo Bookmark Plugin Stored XSS via Chapter Names
- CVE-2026-89255AVideo LoginControl Stored XSS via PGP Public Key
- CVE-2026-89254AVideo CustomizeUser Stored XSS via field_name Parameter