[ Vendor · 6 CVEs ]
WWBN
CVEs affecting WWBN published in the last 30 days, plus any WWBN CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114633 | 22 Oct 2026 | CVSS 6.5 | WWBN AVideoWWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts to delete or modify… | |
| CVE-2026-114634 | 22 Oct 2026 | CVSS 4.3 | WWBN AVideoWWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() because get_headers() follows… | |
| CVE-2026-114048 | 21 Oct 2026 | CVSS 3.5 | WWBN AVideoWWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the… | |
| CVE-2026-105086 | 4 Oct 2026 | CVSS 8.7 | WWBN AVideoWWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting… | |
| CVE-2026-105089 | 4 Oct 2026 | CVSS 8.7 | WWBN AVideoWWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting… | |
| CVE-2026-100630 | 26 Sep 2026 | CVSS 5.4 | WWBN AVideoAVideo before 29.1.0 contains a stored cross-site scripting vulnerability in the video trailer1 field rendered unsanitized within an inline onclick… |