Known Vulnerabilities for AVideo by WWBN
Listed below are 10 of the newest known vulnerabilities associated with "AVideo" by "WWBN".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-64626 json | AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder... | Not Provided | 2026-07-20 | 2026-07-22 |
| CVE-2026-64625 json | AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped commands in double-quoted... | Not Provided | 2026-07-20 | 2026-07-23 |
| CVE-2026-63305 json | AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint where notifyCode and callb... | Not Provided | 2026-07-16 | 2026-07-20 |
| CVE-2026-63304 json | AVideo through 29.0 contains an OS command injection vulnerability in plugin/API/standAlone/functions.php where the listFFmpe... | Not Provided | 2026-07-16 | 2026-07-20 |
| CVE-2026-60092 json | AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vulnerabi... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-56347 json | AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to... | Not Provided | 2026-06-20 | 2026-06-22 |
| CVE-2026-56346 json | AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that allo... | Not Provided | 2026-06-20 | 2026-07-08 |
| CVE-2026-56345 json | AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint... | Not Provided | 2026-06-20 | 2026-06-23 |
| CVE-2026-56342 json | AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenti... | Not Provided | 2026-06-20 | 2026-06-22 |
| CVE-2026-56341 json | AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorizatio... | Not Provided | 2026-06-20 | 2026-06-22 |