Vulnerabilities in WWBN
339 resultsCVE-2026-82643MEDIUMWWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.phpEPSS 0.3%CVE-2026-35449MEDIUMWWBN AVideo has Unauthenticated Information Disclosure via Disabled CLI Guard in install/test.phpEPSS 0.3%CVE-2026-90549MEDIUMWWBN AVideo Missing Authorization via videosAndroid.json.php EndpointEPSS 0.3%CVE-2026-91967MEDIUMAVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURLEPSS 0.3%CVE-2026-85156MEDIUMWWBN AVideo Broken Access Control via Channel PageEPSS 0.3%CVE-2026-85157MEDIUMWWBN AVideo Broken Access Control via feed/index.php program_idEPSS 0.3%CVE-2026-59256HIGHWWBN AVideo Unbound Token Authorization Bypass via GalleryEPSS 0.3%CVE-2026-33493HIGHAVideo has a Path Traversal in import.json.php that Allows Private Video Theft and Arbitrary File Read/Deletion via fileURI ParameterEPSS 0.3%CVE-2026-41056HIGHAVideos has CORS Origin Reflection with Credentials on Sensitive API Endpoints that Enables Cross-Origin Account TakeoverEPSS 0.3%CVE-2026-41064CRITICALAVideo has an incomplete fix for CVE-2026-33502 (Command Injection)EPSS 0.3%CVE-2026-43885HIGHWWBN AVideo: Exposure of Sensitive Information to an Unauthorized Actor and Missing AuthorizationEPSS 0.3%CVE-2026-43875MEDIUMWWBN AVideo: Password Hash Leaked in MobileManager OAuth Redirect URL Enables Account TakeoverEPSS 0.3%CVE-2026-34364MEDIUMAVideo has User Group-Based Category Access Control Bypass via Missing and Broken Group Filtering in categories.json.phpEPSS 0.3%CVE-2026-33763MEDIUMAVideo has an Unauthenticated Video Password Brute-Force Vulnerability via Unrate-Limited Boolean OracleEPSS 0.3%CVE-2026-35448LOWWWBN AVideo Provides Unauthenticated Access to Payment Order Data via BlockonomicsYPT check.phpEPSS 0.3%CVE-2026-33035MEDIUMUnauthenticated Reflected XSS via innerHTML in AVideoEPSS 0.3%CVE-2026-34395MEDIUMAVideo: Mass User PII Disclosure via Missing Authorization in YPTWallet users.json.phpEPSS 0.3%CVE-2026-34740MEDIUMAVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL() ValidationEPSS 0.3%CVE-2026-33319MEDIUMAVideo Vulnerable to OS Command Injection via Unescaped URL in LinkedIn Video Upload Shell CommandEPSS 0.3%CVE-2026-85164HIGHWWBN AVideo Server-Side Request Forgery via set_api_userImagesEPSS 0.3%