Known Vulnerabilities for Avideo by Wwbn
Listed below are 10 of the newest known vulnerabilities associated with "Avideo" by "Wwbn".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-56347 json | AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to... | Not Provided | 2026-06-20 | 2026-06-20 |
| CVE-2026-56346 json | AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that allo... | Not Provided | 2026-06-20 | 2026-06-20 |
| CVE-2026-56345 json | AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint... | Not Provided | 2026-06-20 | 2026-06-20 |
| CVE-2026-56342 json | AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenti... | Not Provided | 2026-06-20 | 2026-06-20 |
| CVE-2026-56341 json | AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorizatio... | Not Provided | 2026-06-20 | 2026-06-20 |
| CVE-2026-47696 json | WWBN AVideo is an open source video platform. In 29.0 and earlier, plugin/AuthorizeNet/processPayment.json.php credits the lo... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-47694 json | WWBN AVideo is an open source video platform. In 29.0 and earlier, AVideo stores category descriptions from user input and la... | Not Provided | 2026-05-29 | 2026-05-30 |
| CVE-2026-46337 json | WWBN AVideo is an open source video platform. In 29.0 and earlier, an unauthenticated remote attacker can read arbitrary imag... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-45731 json | WWBN AVideo is an open source video platform. In 29.0 and earlier, view/update.php reads $_POST['updateFile'] as a relative p... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-45620 json | WWBN AVideo is an open source video platform. In 29.0 and earlier, objects/mention.json.php has no User::loginCheck() or admi... | Not Provided | 2026-05-29 | 2026-05-30 |