Vulnerabilities

TI-2026-33329 CVE-2026-45580 · GHSA-m5j4-7r85-2cj2

WWBN AVideo Live: stored XSS via unescaped stream key in modeYoutubeLive.php class attribute

LOW 23

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00136 Published 2026-05-29 No fix listed CWE-79

TI-2026-33327 CVE-2026-45578 · GHSA-xw67-cg5f-4m2r

WWBN AVideo Live: OS command injection in on_publish.php execAsync via unescaped m3u8 URL

MEDIUM 40

WWBN AVideo is an open source video platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00318 Published 2026-05-29 No fix listed CWE-78

TI-2026-33356 CVE-2026-45610 · GHSA-3mv2-vmwh-rwfx

Missing authentication in WWBN AVideo

MEDIUM 62

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0011 Published 2026-05-29 No fix listed CWE-306

TI-2026-33364 CVE-2026-45619 · GHSA-c3ch-22rq-xfwr

Time-of-check time-of-use race condition in WWBN AVideo

LOW 28

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00136 Published 2026-05-29 No fix listed CWE-367

TI-2026-33365 CVE-2026-45620 · GHSA-vpfx-pxqw-2w79

AVideo CVE-2026-43881 incomplete fix - `objects/mention.json.php:17` is an unauthenticated user enumeration

LOW 29

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00193 Published 2026-05-29 No fix listed CWE-204

TI-2026-33469 CVE-2026-45731 · GHSA-3mjv-375j-6h92

WWBN AVideo: Authenticated Arbitrary File Read in view/update.php

HIGH 70

WWBN AVideo is an open source video platform.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00469 Published 2026-05-29 No fix listed CWE-22

TI-2026-34057 CVE-2026-46337 · GHSA-w4qq-74h6-58wq

WWBN AVideo: Unauthenticated Arbitrary Image Read via Path Traversal in `view/img/image404Raw.php`

HIGH 70

WWBN AVideo is an open source video platform.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00455 Published 2026-05-29 No fix listed CWE-22

TI-2026-35198 CVE-2026-47694 · GHSA-c8h8-vq34-9fw2

WWBN AVideo: Stored XSS via unescaped Gallery category description

MEDIUM 58

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00162 Published 2026-05-29 No fix listed CWE-79

TI-2026-35200 CVE-2026-47696 · GHSA-9392-pj54-qqf8

WWBN AVideo: Authenticated wallet credit bypass in AuthorizeNet processPayment endpoint

HIGH 70

WWBN AVideo is an open source video platform.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0012 Published 2026-05-29 No fix listed CWE-345

TI-2026-29907 CVE-2026-41304 · GHSA-xr6f-h4x7-r6qp

WWBN AVideo vulnerable to RCE caused by clonesite plugin

HIGH 80

WWBN AVideo is an open source video platform.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.02223 Published 2026-04-21 No fix listed CWE-77

TI-2026-29703 CVE-2026-41064 · GHSA-pq8p-wc4f-vg7j

AVideo has an incomplete fix for CVE-2026-33502 (Command Injection)

HIGH 79

WWBN AVideo is an open source video platform.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00335 Published 2026-04-21 No fix listed CWE-78

TI-2026-29702 CVE-2026-41063 · GHSA-m7r8-6q9j-m2hc

WWBN AVideo has incomplete fix for CVE-2026-33500 (XSS)

MEDIUM 58

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00216 Published 2026-04-21 No fix listed CWE-79

TI-2026-29701 CVE-2026-41062 · GHSA-m63r-m9jh-3vc6

Path traversal in WWBN AVideo

MEDIUM 62

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00718 Published 2026-04-21 No fix listed CWE-22

TI-2026-29700 CVE-2026-41061 · GHSA-8pv3-29pp-pf8f

WWBN AVideo Vulnerable to stored XSS via Unanchored Duration Regex in Video Encoder Receiver

MEDIUM 58

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00173 Published 2026-04-21 No fix listed CWE-79

TI-2026-29699 CVE-2026-41060 · GHSA-j432-4w3j-3w8j

AVideo's SSRF via same-domain hostname with alternate port bypasses isSSRFSafeURL

HIGH 67

WWBN AVideo is an open source video platform.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.003 Published 2026-04-21 No fix listed CWE-918

TI-2026-29697 CVE-2026-41058 · GHSA-5879-4fmr-xwf2

AVideo has an incomplete fix for CVE-2026-33293 (Path Traversal) in AVideo

HIGH 68

WWBN AVideo is an open source video platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00469 Published 2026-04-21 No fix listed CWE-22

TI-2026-29696 CVE-2026-41057 · GHSA-ff5q-cc22-fgp4

Origin validation error in WWBN AVideo

MEDIUM 64

WWBN AVideo is an open source video platform.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00132 Published 2026-04-21 No fix listed CWE-346

TI-2026-29695 CVE-2026-41056 · GHSA-ccq9-r5cw-5hwq

AVideos has CORS Origin Reflection with Credentials on Sensitive API Endpoints that…

HIGH 70

WWBN AVideo is an open source video platform.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00335 Published 2026-04-21 No fix listed CWE-942

TI-2026-29694 CVE-2026-41055 · GHSA-793q-xgj6-7frp

AVideo has an incomplete fix for CVE-2026-33039 (SSRF)

HIGH 76

WWBN AVideo is an open source video platform.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00377 Published 2026-04-21 Fixed in 26.0 CWE-918

TI-2026-29588 CVE-2026-40935 · GHSA-hg7g-56h5-5pqr

WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure

MEDIUM 63

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00218 Published 2026-04-21 No fix listed CWE-804

TI-2026-29583 CVE-2026-40929 · GHSA-8qm8-g55h-xmqr

Cross-site request forgery in WWBN AVideo

MEDIUM 58

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00113 Published 2026-04-21 No fix listed CWE-352

TI-2026-29582 CVE-2026-40928 · GHSA-x2pw-9c38-cp2j

Cross-site request forgery in WWBN AVideo

MEDIUM 58

WWBN AVideo is an open source video platform.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00115 Published 2026-04-21 No fix listed CWE-352

TI-2026-29580 CVE-2026-40926 · GHSA-ffw8-fwxp-h64w

WWBN AVideo Vulnerable to CSRF in Admin JSON Endpoints (Category CRUD, Plugin Update Script)

MEDIUM 64

WWBN AVideo is an open source video platform.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00166 Published 2026-04-21 No fix listed CWE-352

TI-2026-29579 CVE-2026-40925 · GHSA-vvfw-4m39-fjqf

Cross-site request forgery in WWBN AVideo

HIGH 71

WWBN AVideo is an open source video platform.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00173 Published 2026-04-21 No fix listed CWE-352

TI-2026-29567 CVE-2026-40911 · GHSA-gph2-j4c9-vhhr

Code injection in WWBN AVideo

HIGH 82

WWBN AVideo is an open source video platform.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00645 Published 2026-04-21 No fix listed CWE-94

Vulnerabilities

Filters