Skip to content
OpenAdvisories

Vendor

WWBN

350 known vulnerabilities.

Products

AVideo 340 AVideo-Encoder 10
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-114048

    WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints

    WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the .json.php-only autoCSRFGuard() check. Attackers can lure logged-in users to a page with an auto-submitting form to make pri…

    WWBN AVideo
  • Low 3.7
    CVE-2026-35448

    WWBN AVideo Provides Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.php

    WWBN AVideo is an open source video platform. In versions 26.0 and prior, the BlockonomicsYPT plugin's check.php endpoint returns payment order data for any Bitcoin address without requiring authentication. The endpoint was designed as an AJAX polling helper …

    WWBN AVideo wwbn/avideo Packagist
  • Low 2.1
    CVE-2026-33296

    AVideo has an Open Redirect via Unvalidated redirectUri in userLogin.php

    WWBN AVideo is an open source video platform. Prior to version 26.0, WWBN/AVideo contains an open redirect vulnerability in the login flow where a user-supplied redirectUri parameter is reflected directly into a JavaScript `document.location` assignment witho…

    WWBN AVideo wwbn/avideo Packagist