Vulnerability index

Browse CVEs

183 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Avideo MEDIUM 5.4
CVE-2026-39367

WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's EPG (Electronic Program Guide) feature parses XML from user-contro…

Fix: after 26.0
Fix from $1,600 2026-04-07
Avideo MEDIUM 5.3
CVE-2026-35449

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the install/test.php diagnostic script has its CLI-only access guard disabl…

Fix: after 26.0
Fix from $1,600 2026-04-06
Avideo MEDIUM 5.3
CVE-2026-35450

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/API/check.ffmpeg.json.php endpoint probes the FFmpeg remote serv…

Fix: after 26.0
Fix from $1,600 2026-04-06
Avideo MEDIUM 5.3
CVE-2026-35452

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/CloneSite/client.log.php endpoint serves the clone operation log…

Fix: after 26.0
Fix from $1,600 2026-04-06
Avideo MEDIUM 5.3
CVE-2026-35179

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the SocialMediaPublisher plugin exposes a publishInstagram.json.php endpoin…

Fix: after 26.0
Fix from $1,600 2026-04-06
Avideo HIGH 7.3
CVE-2026-34733

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo installation script install/deleteSystemdPrivate.php contains a …

Fix: after 26.0
Fix from $1,950 2026-03-31
Avideo MEDIUM 6.5
CVE-2026-34737

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the StripeYPT plugin includes a test.php debug endpoint that is accessible …

Fix: after 26.0
Fix from $1,600 2026-03-31
Avideo MEDIUM 6.5
CVE-2026-34740

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the EPG (Electronic Program Guide) link feature in AVideo allows authentica…

Fix: after 26.0
Fix from $1,600 2026-03-31
Avideo MEDIUM 6.1
CVE-2026-34739

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the User_Location plugin's testIP.php page reflects the ip request paramete…

Fix: after 26.0
Fix from $1,600 2026-03-31
Avideo HIGH 7.5
CVE-2026-34731

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo on_publish_done.php endpoint in the Live plugin allows unauthent…

Fix: after 26.0
Fix from $1,950 2026-03-31
Avideo HIGH 7.5
CVE-2026-34732

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo CreatePlugin template for list.json.php does not include any aut…

Fix: after 26.0
Fix from $1,950 2026-03-31
Avideo MEDIUM 6.5
CVE-2026-34611

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo endpoint objects/emailAllUsers.json.php allows administrators to…

Fix: after 26.0
Fix from $1,600 2026-03-31
Avideo MEDIUM 6.5
CVE-2026-34613

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo endpoint objects/pluginSwitch.json.php allows administrators to …

Fix: after 26.0
Fix from $1,600 2026-03-31
Avideo MEDIUM 6.4
CVE-2026-34716

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo YPTSocket plugin's caller feature renders incoming call notifica…

Fix: after 26.0
Fix from $1,600 2026-03-31
Avideo HIGH 8.1
CVE-2026-34394

WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's admin plugin configuration endpoint (admin/save.json.php) lacks an…

Fix: after 26.0
Fix from $1,950 2026-03-31
Avideo MEDIUM 6.5
CVE-2026-34395

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/YPTWallet/view/users.json.php endpoint returns all platform user…

Fix: after 26.0
Fix from $1,600 2026-03-31
Avideo MEDIUM 6.1
CVE-2026-34396

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo admin panel renders plugin configuration values in HTML forms wi…

Fix: after 26.0
Fix from $1,600 2026-03-31
Avideo HIGH 8.2
CVE-2026-34375

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the YPTWallet Stripe payment confirmation page directly echoes th…

Fix: after 26.0
Fix from $1,950 2026-03-27
Avideo CRITICAL 9.1
CVE-2026-34374

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `Live_schedule::keyExists()` method constructs a SQL query by…

Fix: after 26.0
Fix from $2,300 2026-03-27
Avideo MEDIUM 5.3
CVE-2026-34369

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `get_api_video_file` and `get_api_video` API endpoints in AVi…

Fix: after 26.0
Fix from $1,600 2026-03-27
Avideo MEDIUM 5.3
CVE-2026-34364

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `categories.json.php` endpoint, which serves the category lis…

Fix: after 26.0
Fix from $1,600 2026-03-27
Avideo MEDIUM 5.3
CVE-2026-34368

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `transferBalance()` method in `plugin/YPTWallet/YPTWallet.php…

Fix: after 26.0
Fix from $1,600 2026-03-27
Avideo MEDIUM 6.3
CVE-2026-34245

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `plugin/PlayLists/View/Playlists_schedules/add.json.php` endp…

Fix: after 26.0
Fix from $1,600 2026-03-27
Avideo MEDIUM 5.4
CVE-2026-34247

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `plugin/Live/uploadPoster.php` endpoint allows any authentica…

Fix: after 26.0
Fix from $1,600 2026-03-27
Avideo MEDIUM 5.4
CVE-2026-34362

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `verifyTokenSocket()` function in `plugin/YPTSocket/functions…

Fix: after 26.0
Fix from $1,600 2026-03-27
Avideo CRITICAL 9.8
CVE-2026-33770

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `fixCleanTitle()` static method in `objects/category.php` con…

Fix: after 26.0
Fix from $2,300 2026-03-27
Avideo HIGH 8.8
CVE-2026-33767

WWBN AVideo is an open source video platform. In versions up to and including 26.0, in `objects/like.php`, the `getLike()` method constructs a SQL qu…

Fix: after 26.0
Fix from $1,950 2026-03-27
Avideo HIGH 7.5
CVE-2026-33867

WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo allows content owners to password-protect individual video…

Fix: after 26.0
Fix from $1,950 2026-03-27
Avideo MEDIUM 6.5
CVE-2026-33766

WWBN AVideo is an open source video platform. In versions up to and including 26.0, `isSSRFSafeURL()` validates URLs against private/reserved IP rang…

Fix: after 26.0
Fix from $1,600 2026-03-27
Avideo MEDIUM 5.3
CVE-2026-33759

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `objects/playlistsVideos.json.php` endpoint returns the full …

Fix: after 26.0
Fix from $1,600 2026-03-27