vciy

CVEs we hold for Wwbn

Records whose assigning authority named Wwbn as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-92915WWBN AVideo userVerifyEmail.php Unauthenticated Access ControlWWBN AVideo
CVE-2026-92914AVideo LoginControl PGP Second Factor Authentication BypassWWBN AVideo
CVE-2026-92913AVideo Weak PRNG Activation Code Authentication BypassWWBN AVideo
CVE-2026-92912AVideo Cryptographically Weak PRNG via uniqid Stream KeyWWBN AVideo
CVE-2026-92586AVideo through 29.0 Missing Authorization via comment API endpointWWBN AVideo
CVE-2026-92585AVideo through 29.0 Missing Authorization Check via API Like EndpointWWBN AVideo
CVE-2026-92584AVideo through 29.0 Stored Cross-Site Scripting via User-Agent HeaderWWBN AVideo
CVE-2026-92583AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter IncrementWWBN AVideo
CVE-2026-92582AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF BypassWWBN AVideo
CVE-2026-92581AVideo through 29.0 Like Counter Desynchronization via Array ParameterWWBN AVideo
CVE-2026-92580AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRFWWBN AVideo
CVE-2026-92579AVideo through 29.0 Broken Access Control via CSRF Exemption Basename CollisionWWBN AVideo
CVE-2026-92578WWBN AVideo through 29.0 Authentication Bypass via Stored Password HashWWBN AVideo
CVE-2026-92577AVideo through 29.0 API get_api_video Broken Access Control via clean_titleWWBN AVideo
CVE-2026-91967AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURLWWBN AVideo
CVE-2026-91966AVideo through 29.0 Unauthenticated SSRF via Host HeaderWWBN AVideo
CVE-2026-91965WWBN AVideo through 29.0 Broken Access Control via Live EndpointsWWBN AVideo
CVE-2026-90552WWBN AVideo Missing Authorization via Playlists_schedules list.json.phpWWBN AVideo
CVE-2026-90551WWBN AVideo Missing Authorization via video_from_program APIWWBN AVideo
CVE-2026-90550WWBN AVideo Missing Authorization via mediaSession.json.phpWWBN AVideo
CVE-2026-90549WWBN AVideo Missing Authorization via videosAndroid.json.php EndpointWWBN AVideo
CVE-2026-90548WWBN AVideo Missing Authorization in ImageGallery list.json.phpWWBN AVideo
CVE-2026-90547WWBN AVideo Missing Authorization via getBookmarks.json.phpWWBN AVideo
CVE-2026-90546WWBN AVideo Missing Authorization via like.json.phpWWBN AVideo
CVE-2026-90545WWBN AVideo Missing Authorization via commentAddNew.json.phpWWBN AVideo
CVE-2026-90544WWBN AVideo Missing Authorization via videoAddViewCount.json.phpWWBN AVideo
CVE-2026-90543WWBN AVideo Missing Authentication via socketMessageLiveOwner.json.phpWWBN AVideo
CVE-2026-90542WWBN AVideo Missing Authorization via remindMe.json.phpWWBN AVideo
CVE-2026-90541WWBN AVideo Unauthenticated Information Disclosure via menus.json.phpWWBN AVideo
CVE-2026-90540WWBN AVideo Missing Authorization via playListAddVideo.json.phpWWBN AVideo
CVE-2026-90539WWBN AVideo Missing Authentication via menuItems.json.phpWWBN AVideo
CVE-2026-90538WWBN AVideo Missing Authorization via playlistsFromUser.json.phpWWBN AVideo
CVE-2026-90537WWBN AVideo Scheduler sendEmail Missing Authorization via TokenWWBN AVideo
CVE-2026-90536WWBN AVideo Missing Authorization via adsInfo API EndpointWWBN AVideo
CVE-2026-89257AVideo through 29.0 Cross-User Category Asset Deletion via Missing Ownership CheckWWBN AVideo
CVE-2026-89256AVideo Bookmark Plugin Stored XSS via Chapter NamesWWBN AVideo
CVE-2026-89255AVideo LoginControl Stored XSS via PGP Public KeyWWBN AVideo
CVE-2026-89254AVideo CustomizeUser Stored XSS via field_name ParameterWWBN AVideo
CVE-2026-89253AVideo Stored XSS via donationLink in watch page buttonWWBN AVideo
CVE-2026-89252AVideo Missing Authorization in addLiveLink.php LiveLink UpdateWWBN AVideo
CVE-2026-89251AVideo Missing Authorization via AD_Server log.php Wallet CreditWWBN AVideo
CVE-2026-89250WWBN AVideo Unauthenticated File Read via getRecordedFile.phpWWBN AVideo
CVE-2026-89249AVideo YPTWallet Stored XSS via CryptoWallet ConfigurationWWBN AVideo
CVE-2026-89248AVideo WebRTC Plugin Information Disclosure via status.json.phpWWBN AVideo
CVE-2026-89247WWBN AVideo XML Injection via plugin/AD_Server/VMAP.phpWWBN AVideo
CVE-2026-89246WWBN AVideo CSV Formula Injection via myComments.download.phpWWBN AVideo
CVE-2026-89245WWBN AVideo Cross-Site Request Forgery via playlistRemove.phpWWBN AVideo
CVE-2026-89244WWBN AVideo Reflected XSS via Gallery Category getBackURLWWBN AVideo
CVE-2026-89243WWBN AVideo Stored XSS via UserGroups setGroup_nameWWBN AVideo
CVE-2026-89242WWBN AVideo Unauthenticated SSRF via login.json.phpWWBN AVideo
CVE-2026-89241WWBN AVideo Reflected XSS via confirmLivePassword.phpWWBN AVideo
CVE-2026-89240WWBN AVideo Reflected XSS via confirmLivePassword.phpWWBN AVideo
CVE-2026-89239WWBN AVideo Reflected XSS via Referer Header Comment BreakoutWWBN AVideo
CVE-2026-89148AVideo Open Redirect via playlistSort.php Referer HeaderWWBN AVideo
CVE-2026-88876AVideo PlayerSkins seo.php Missing Authorization Password-Protected VODWWBN AVideo
CVE-2026-88875AVideo Incomplete API Sanitization Information DisclosureWWBN AVideo
CVE-2026-88874AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication BypassWWBN AVideo
CVE-2026-88873WWBN AVideo Cross-Site Request Forgery via logArchive.json.phpWWBN AVideo
CVE-2026-88872AVideo CustomizeUser setPassword.json.php CSRFWWBN AVideo
CVE-2026-88871WWBN AVideo CustomizeUser setSubscribers CSRF via GETWWBN AVideo
CVE-2026-88870WWBN AVideo LoginControl PGP Key CSRF via GET RequestWWBN AVideo
CVE-2026-88869AVideo AD_Server Stored XSS via log.php label parameterWWBN AVideo
CVE-2026-88868AVideo LiveLinks Stored XSS via title and description fieldsWWBN AVideo
CVE-2026-88867WWBN AVideo Stored XSS via Category Name and Icon ClassWWBN AVideo
CVE-2026-88866WWBN AVideo LoginControl Stored XSS via User-Agent HeaderWWBN AVideo
CVE-2026-88865AVideo Missing Authorization via getRestream.json.phpWWBN AVideo
CVE-2026-86729WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorizeWWBN AVideo
CVE-2026-86728AVideo through 29.0 Unauthenticated Disclosure via epg.json.phpWWBN AVideo
CVE-2026-86727AVideo through 29.0 Information Disclosure via stats.json.phpWWBN AVideo
CVE-2026-86726AVideo through 29.0 Information Disclosure via restreamsActive.json.phpWWBN AVideo
CVE-2026-86725AVideo SocialMediaPublisher Missing Authorization via add.json.phpWWBN AVideo
CVE-2026-86724AVideo YPTWallet saveBalance.php Cross-Site Request ForgeryWWBN AVideo
CVE-2026-86723AVideo LoginControl PGP Authentication Bypass via verifyChallengeWWBN AVideo
CVE-2026-86722AVideo Authentication Bypass via SQL Cache InvalidationWWBN AVideo
CVE-2026-86721AVideo through c3edcc274c Authorization Bypass via Session CookieWWBN AVideo
CVE-2026-86720WWBN AVideo Missing Authorization via resendRestreamer.json.phpWWBN AVideo
CVE-2026-86719WWBN AVideo CustomizeUser Cross-Site Request Forgery Session HijackingWWBN AVideo
CVE-2026-86718WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.phpWWBN AVideo
CVE-2026-86190WWBN AVideo Broken Access Control via videoViewsInfo hash ParameterWWBN AVideo
CVE-2026-86189WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.phpWWBN AVideo
CVE-2026-86188AVideo YPTSocket Plugin Unauthenticated Cross-Site ScriptingWWBN AVideo
CVE-2026-86187WWBN AVideo Weak PRNG Password Generation via External LoginWWBN AVideo
CVE-2026-86186AVideo API Rate Limit Bypass via Bot User-Agent HeaderWWBN AVideo
CVE-2026-85577AVideo userLogin.php Reflected XSS via error parameterWWBN AVideo
CVE-2026-85164WWBN AVideo Server-Side Request Forgery via set_api_userImagesWWBN AVideo
CVE-2026-85163AVideo Server-Side Request Forgery via epg_link parameterWWBN AVideo
CVE-2026-85162AVideo through c91b5975d CSRF via saveLive.phpWWBN AVideo
CVE-2026-85161AVideo removePoster.php Cross-Site Request Forgery File DeletionWWBN AVideo
CVE-2026-85160AVideo through c91b5975d CSRF and Path Traversal via stopLive.phpWWBN AVideo
CVE-2026-85159AVideo Reflected XSS via cancelUri in userLogin.phpWWBN AVideo
CVE-2026-85158AVideo Reflected XSS via videoEmbeded.php link parameterWWBN AVideo
CVE-2026-85157WWBN AVideo Broken Access Control via feed/index.php program_idWWBN AVideo
CVE-2026-85156WWBN AVideo Broken Access Control via Channel PageWWBN AVideo
CVE-2026-85155WWBN AVideo SQL Injection via get.json.php APIName channelsWWBN AVideo
CVE-2026-85154WWBN AVideo Authentication Bypass via Non-Expiring video_id_hashWWBN AVideo
CVE-2026-84483WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.phpWWBN AVideo
CVE-2026-84482WWBN AVideo Cross-Site Request Forgery via get_domain() validationWWBN AVideo
CVE-2026-84481WWBN AVideo through 30.0 Information Disclosure via MobileManagerWWBN AVideo
CVE-2026-84480WWBN AVideo Password Recovery Token Expiration BypassWWBN AVideo
CVE-2026-84479WWBN AVideo Authentication Bypass via User-Agent HeaderWWBN AVideo
CVE-2026-84478WWBN AVideo Unauthenticated Arbitrary Log File DeletionWWBN AVideo
CVE-2026-84477AVideo Stored XSS via Live Schedule Title DescriptionWWBN AVideo
CVE-2026-84476WWBN AVideo Authentication Bypass via X-Real-IP HeaderWWBN AVideo
CVE-2026-84208AVideo User_Location Plugin Unauthenticated SQL InjectionWWBN AVideo
CVE-2026-84187AVideo on_publish.php Missing Authentication Check via RTMP CallbackWWBN AVideo
CVE-2026-83595AVideo Cross-Site Request Forgery via plugin/API/set.json.phpWWBN AVideo
CVE-2026-82648WWBN AVideo SSRF Filter Bypass via NAT64 Hex AddressWWBN AVideo
CVE-2026-82647WWBN AVideo Cross-Site Request Forgery via sendEmail.json.phpWWBN AVideo
CVE-2026-82646WWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.phpWWBN AVideo
CVE-2026-82645AVideo Unauthenticated Stream Credential Disclosure via Forgeable TokenWWBN AVideo
CVE-2026-82644WWBN AVideo Brute-force Rate Limiting Bypass via Missing User-AgentWWBN AVideo
CVE-2026-82643WWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.phpWWBN AVideo
CVE-2026-81733WWBN AVideo through 30.0 CSRF via myLiveControls.save.json.phpWWBN AVideo
CVE-2026-81732WWBN AVideo through 30.0 Information Disclosure via report4.json.phpWWBN AVideo
CVE-2026-81678AVideo SSRF Guard Bypass via IPv6 Transition AddressesWWBN AVideo
CVE-2026-72748AVideo Unauthenticated Arbitrary File Write via aVideoEncoderChunk.json.phpWWBN AVideo
CVE-2026-72747AVideo Stored Cross-Site Scripting via Unauthenticated RegistrationWWBN AVideo
CVE-2026-64626AVideo Encoder downloadURL SSRF via unpinned retry fallbackWWBN AVideo
CVE-2026-64625AVideo before 29.0 OS Command Injection via execAsyncWWBN AVideo
CVE-2026-63305AVideo through 29.0 OS Command Injection via ffmpeg.json.phpWWBN AVideo
CVE-2026-63304AVideo through 29.0 OS Command Injection via listFFmpegProcessesWWBN AVideo
CVE-2026-59808AVideo Authentication Bypass via Unkeyed Video Hash DisclosureWWBN AVideo
CVE-2026-59256WWBN AVideo Unbound Token Authorization Bypass via GalleryWWBN AVideo
CVE-2026-58003WWBN AVideo Cross-Site Request Forgery via releaseVideoNow.json.phpWWBN AVideo
CVE-2026-58002WWBN AVideo Authorization Bypass via Users_affiliations add.json.phpWWBN AVideo
CVE-2026-58001WWBN AVideo Cross-Site Request Forgery via videoEditLight.phpWWBN AVideo
CVE-2026-57944AVideo channelToGallery.json.php Cross-Site Request ForgeryWWBN AVideo
CVE-2026-56380AVideo feed/index.php Exposure of Channel Owner Email AddressWWBN AVideo
CVE-2026-56347AVideo TopMenu Plugin - Stored Cross-Site Scripting via Unescaped Menu Item FieldsWWBN AVideo
CVE-2026-55173AVideo incomplete fix for CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving…WWBN AVideo
CVE-2026-54458AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket PluginWWBN AVideo
CVE-2026-50183WWBN AVideo: Stored XSS via Hostile YouTube Video Title in AVideo YouTubeAPI Gallery SectionWWBN AVideo
CVE-2026-50182AVideo Has Unauthenticated Reflected XSS via $_GET['search'] in YouTubeAPI Gallery PaginationWWBN AVideo
CVE-2026-49279WWBN AVideo: Stored XSS via autoEvalCodeOnHTML Bypass in MessageSQLite WebSocket Handler (CVE-2026-43874 Bypass)WWBN AVideo
CVE-2026-47696WWBN AVideo: Authenticated wallet credit bypass in AuthorizeNet processPayment endpointWWBN AVideo
CVE-2026-47694WWBN AVideo: Stored XSS via unescaped Gallery category descriptionWWBN AVideo
CVE-2026-46337WWBN AVideo: Unauthenticated Arbitrary Image Read via Path Traversal in `view/img/image404Raw.php`WWBN AVideo
CVE-2026-45731WWBN AVideo: Authenticated Arbitrary File Read in view/update.phpWWBN AVideo
CVE-2026-45620AVideo CVE-2026-43881 incomplete fix - `objects/mention.json.php:17` is an unauthenticated user enumerationWWBN AVideo
CVE-2026-45619AVideo CVE-2026-43884 incomplete fix - `isSSRFSafeURL()` call sites still discard the `$resolvedIP` out-param at master…WWBN AVideo
CVE-2026-45610WWBN AVideo plugin/LoginControl/set.json.php: 2FA toggle endpoint has no CSRF protection, letting an attacker page…WWBN AVideo
CVE-2026-45580WWBN AVideo Live: stored XSS via unescaped stream key in modeYoutubeLive.php class attributeWWBN AVideo
CVE-2026-45578WWBN AVideo Live: OS command injection in on_publish.php execAsync via unescaped m3u8 URLWWBN AVideo
CVE-2026-43885WWBN AVideo: Exposure of Sensitive Information to an Unauthorized Actor and Missing AuthorizationWWBN AVideo
CVE-2026-43884WWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()WWBN AVideo
CVE-2026-43883WWBN AVideo: IDOR in PayPalYPT agreementCancel.json.php Allows Any Authenticated User to Cancel Arbitrary PayPal…WWBN AVideo
CVE-2026-43882WWBN AVideo: Unauthenticated CRLF/ICS Injection in Scheduler downloadICS.php Allows Calendar Event SpoofingWWBN AVideo
CVE-2026-43881WWBN AVideo: Unauthenticated User Enumeration in `objects/users.json.php` via `isCompany` Parameter Flips `$ignoreAdmin…WWBN AVideo
CVE-2026-43880WWBN AVideo: Unauthenticated Arbitrary Email Sending via sendEmail.json.php Allows Phishing from Site's Legitimate From…WWBN AVideo
CVE-2026-43879WWBN AVideo: Blind SSRF in YPTWallet Donation Webhook via Missing isSSRFSafeURL() Check and CURLOPT_FOLLOWLOCATION…WWBN AVideo
CVE-2026-43878WWBN AVideo: Reflected XSS in plugin/Meet/iframe.php via Unescaped `user`/`pass` Parameters Reflected into JavaScript…WWBN AVideo
CVE-2026-43877WWBN AVideo: CSRF in userSavePhoto.php Allows Cross-Origin Overwrite of Any Logged-in User's Profile Photo with…WWBN AVideo
CVE-2026-43876WWBN AVideo: HTML Injection in notifySubscribers.json.php Enables Platform-Branded Phishing Emails to Channel…WWBN AVideo
CVE-2026-43875WWBN AVideo: Password Hash Leaked in MobileManager OAuth Redirect URL Enables Account TakeoverWWBN AVideo
CVE-2026-43874WWBN AVideo: Incomplete Fix for YPTSocket autoEvalCodeOnHTML Strip: Unauthenticated Cross-User JavaScript Execution via…WWBN AVideo
CVE-2026-43873WWBN AVideo: Unauthenticated Disclosure of CloneSite `myKey` via Error Echo in `cloneClient.json.php` Enables…WWBN AVideo
CVE-2026-41304WWBN AVideo vulnerable to RCE caused by clonesite pluginWWBN AVideo
CVE-2026-41064AVideo has an incomplete fix for CVE-2026-33502 (Command Injection)WWBN AVideo
CVE-2026-41063WWBN AVideo has incomplete fix for CVE-2026-33500 (XSS)WWBN AVideo
CVE-2026-41062WWBN/AVideo has an incomplete fix for a directory traversal bypass via query string in ReceiveImage downloadURL…WWBN AVideo
CVE-2026-41061WWBN AVideo Vulnerable to stored XSS via Unanchored Duration Regex in Video Encoder ReceiverWWBN AVideo
CVE-2026-41060AVideo's SSRF via same-domain hostname with alternate port bypasses isSSRFSafeURLWWBN AVideo
CVE-2026-41058AVideo has an incomplete fix for CVE-2026-33293 (Path Traversal) in AVideoWWBN AVideo
CVE-2026-41057AVideo has CORS Origin Reflection Bypass via plugin/API/router.php and allowOrigin(true) that Exposes Authenticated API…WWBN AVideo
CVE-2026-41056AVideos has CORS Origin Reflection with Credentials on Sensitive API Endpoints that Enables Cross-Origin Account…WWBN AVideo
CVE-2026-41055AVideo has an incomplete fix for CVE-2026-33039 (SSRF)WWBN AVideo
CVE-2026-40935WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on FailureWWBN AVideo
CVE-2026-40929WWBN AVideo's missing CSRF protection in objects/commentDelete.json.php enables mass comment deletion against…WWBN AVideo
CVE-2026-40928AVideo: Missing CSRF Protection on State-Changing JSON Endpoints Enables Forced Comment Creation, Vote Manipulation…WWBN AVideo
CVE-2026-40926WWBN AVideo Vulnerable to CSRF in Admin JSON Endpoints (Category CRUD, Plugin Update Script)WWBN AVideo
CVE-2026-40925WWBN AVideo has CSRF in configurationUpdate.json.php Enables Full Site Configuration Takeover Including Encoder URL and…WWBN AVideo
CVE-2026-40911WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via…WWBN AVideo
CVE-2026-40909WWBN AVideo has a Path Traversal in Locale Save Endpoint that Enables Arbitrary PHP File Write to Any Web-Accessible…WWBN AVideo
CVE-2026-40908WWBN AVideo has an Unauthenticated Information Disclosure via git.json.php that Exposes Developer Emails and Deployed…WWBN AVideo
CVE-2026-40907WWBN AVideo has IDOR in Live Restreams list.json.php that Exposes Other Users' Stream Keys and OAuth TokensWWBN AVideo
CVE-2026-39370WWBN AVideo has an Allowlisted downloadURL media extensions bypass SSRF protection and enable internal response…WWBN AVideo
CVE-2026-39369WWBN AVideo's GIF poster fetch bypasses traversal scrubbing and exposes local files through public media URLsWWBN AVideo
CVE-2026-39368WWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal servicesWWBN AVideo
CVE-2026-39367WWBN AVideo has Stored XSS via Malicious EPG XML Program Titles in AVideo EPG PageWWBN AVideo
CVE-2026-39366WWBN AVideo Affected by a PayPal IPN Replay Attack Enabling Wallet Balance Inflation via Missing Transaction…WWBN AVideo
CVE-2026-35452WWBN AVideo has Unauthenticated Information Disclosure via Missing Auth on CloneSite client.log.phpWWBN AVideo
CVE-2026-35450WWBN AVideo has Unauthenticated FFmpeg Remote Server Status Disclosure via check.ffmpeg.json.phpWWBN AVideo
CVE-2026-35449WWBN AVideo has Unauthenticated Information Disclosure via Disabled CLI Guard in install/test.phpWWBN AVideo
CVE-2026-35448WWBN AVideo Provides Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.phpWWBN AVideo
CVE-2026-35181WWBN AVideo Affected by CSRF on Player Skin Configuration via admin/playerUpdate.json.phpWWBN AVideo
CVE-2026-35180WWBN AVideo affected by CSRF on Site Customization Endpoint Enables Logo Overwrite via Base64 File WriteWWBN AVideo
CVE-2026-35179WWBN AVideo Unauthenticated Instagram Graph API Proxy via publishInstagram.json.phpWWBN AVideo
CVE-2026-34740AVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL() ValidationWWBN AVideo
CVE-2026-34739AVideo: Reflected XSS via Unescaped ip Parameter in User_Location testIP.phpWWBN AVideo
CVE-2026-34738AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request ParameterWWBN AVideo
CVE-2026-34737AVideo: Arbitrary Stripe Subscription Cancellation via Debug Endpoint and retrieveSubscriptions() BugWWBN AVideo
CVE-2026-34733AVideo: Unauthenticated File Deletion via PHP Operator Precedence Bug in CLI GuardWWBN AVideo
CVE-2026-34732AVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 EndpointsWWBN AVideo
CVE-2026-34731AVideo: Unauthenticated Live Stream Termination via RTMP Callback on_publish_done.phpWWBN AVideo
CVE-2026-34716AVideo: DOM XSS via Unsanitized Display Name in WebSocket Call NotificationWWBN AVideo
CVE-2026-34613AVideo: CSRF on Plugin Enable/Disable Endpoint Allows Disabling Security PluginsWWBN AVideo
CVE-2026-34611AVideo: CSRF on emailAllUsers.json.php Enables Mass Phishing Email to All UsersWWBN AVideo
CVE-2026-34396AVideo: Stored XSS via Unescaped Plugin Configuration Values in Admin PanelWWBN AVideo
CVE-2026-34395AVideo: Mass User PII Disclosure via Missing Authorization in YPTWallet users.json.phpWWBN AVideo
CVE-2026-34394AVideo: CSRF on Admin Plugin Configuration Enables Payment Credential HijackingWWBN AVideo

200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.