Wwbn vulnerabilities
345 CVEs and advisories name Wwbn as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-89253AVideo Stored XSS via donationLink in watch page button
- CVE-2026-89252AVideo Missing Authorization in addLiveLink.php LiveLink Update
- CVE-2026-89251AVideo Missing Authorization via AD_Server log.php Wallet Credit
- CVE-2026-89250WWBN AVideo Unauthenticated File Read via getRecordedFile.php
- CVE-2026-89249AVideo YPTWallet Stored XSS via CryptoWallet Configuration
- CVE-2026-89248AVideo WebRTC Plugin Information Disclosure via status.json.php
- CVE-2026-89247WWBN AVideo XML Injection via plugin/AD_Server/VMAP.php
- CVE-2026-89246WWBN AVideo CSV Formula Injection via myComments.download.php
- CVE-2026-89245WWBN AVideo Cross-Site Request Forgery via playlistRemove.php
- CVE-2026-89244WWBN AVideo Reflected XSS via Gallery Category getBackURL
- CVE-2026-89243WWBN AVideo Stored XSS via UserGroups setGroup_name
- CVE-2026-89242WWBN AVideo Unauthenticated SSRF via login.json.php
- CVE-2026-89241WWBN AVideo Reflected XSS via confirmLivePassword.php
- CVE-2026-89240WWBN AVideo Reflected XSS via confirmLivePassword.php
- CVE-2026-89239WWBN AVideo Reflected XSS via Referer Header Comment Breakout
- CVE-2026-89148AVideo Open Redirect via playlistSort.php Referer Header
- CVE-2026-88876AVideo PlayerSkins seo.php Missing Authorization Password-Protected VOD
- CVE-2026-88875AVideo Incomplete API Sanitization Information Disclosure
- CVE-2026-88874AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication Bypass
- CVE-2026-88873WWBN AVideo Cross-Site Request Forgery via logArchive.json.php
- CVE-2026-88872AVideo CustomizeUser setPassword.json.php CSRF
- CVE-2026-88871WWBN AVideo CustomizeUser setSubscribers CSRF via GET
- CVE-2026-88870WWBN AVideo LoginControl PGP Key CSRF via GET Request
- CVE-2026-88869AVideo AD_Server Stored XSS via log.php label parameter
- CVE-2026-88868AVideo LiveLinks Stored XSS via title and description fields
- CVE-2026-88867WWBN AVideo Stored XSS via Category Name and Icon Class
- CVE-2026-88866WWBN AVideo LoginControl Stored XSS via User-Agent Header
- CVE-2026-88865AVideo Missing Authorization via getRestream.json.php
- CVE-2026-86729WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize
- CVE-2026-86728AVideo through 29.0 Unauthenticated Disclosure via epg.json.php