Vulnerabilities in WWBN

323 results
Vexday analysis

O portfólio de vulnerabilidades do WWBN reúne 187 CVEs catalogadas, com 30 classificadas como críticas e 67 surgidas apenas nos últimos 90 dias — volume recente que indica aceleração no ritmo de descoberta e demanda atenção contínua ao ciclo de atualização. Embora nenhuma CVE esteja no catálogo KEV da CISA, situando a taxa de exploração ativa abaixo da média geral do catálogo, o CVE-2022-30690 apresenta EPSS de 0,8358, sinalizando alta probabilidade estimada de exploração e devendo ser tratado com prioridade. A falha mais recorrente é CWE-79 (Cross-Site Scripting), categoria que, combinada com a existência de ao menos uma prova de conceito pública, amplia a superfície de risco para ambientes que ainda não aplicaram as correções disponíveis.

CVE-2026-89244MEDIUMWWBN AVideo Reflected XSS via Gallery Category getBackURLEPSS 0.2%CVE-2026-89239MEDIUMWWBN AVideo Reflected XSS via Referer Header Comment BreakoutEPSS 0.2%CVE-2026-47694MEDIUMWWBN AVideo: Stored XSS via unescaped Gallery category descriptionEPSS 0.2%CVE-2026-83595HIGHAVideo Cross-Site Request Forgery via plugin/API/set.json.phpEPSS 0.2%CVE-2026-90544MEDIUMWWBN AVideo Missing Authorization via videoAddViewCount.json.phpEPSS 0.2%CVE-2026-92586MEDIUMAVideo through 29.0 Missing Authorization via comment API endpointEPSS 0.2%CVE-2026-92585MEDIUMAVideo through 29.0 Missing Authorization Check via API Like EndpointEPSS 0.2%CVE-2026-90540MEDIUMWWBN AVideo Missing Authorization via playListAddVideo.json.phpEPSS 0.2%CVE-2026-92579MEDIUMAVideo through 29.0 Broken Access Control via CSRF Exemption Basename CollisionEPSS 0.2%CVE-2026-34611MEDIUMAVideo: CSRF on emailAllUsers.json.php Enables Mass Phishing Email to All UsersEPSS 0.2%CVE-2026-43876MEDIUMWWBN AVideo: HTML Injection in notifySubscribers.json.php Enables Platform-Branded Phishing Emails to Channel SubscribersEPSS 0.2%CVE-2026-82646MEDIUMWWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.phpEPSS 0.2%CVE-2026-85158MEDIUMAVideo Reflected XSS via videoEmbeded.php link parameterEPSS 0.2%CVE-2026-89251HIGHAVideo Missing Authorization via AD_Server log.php Wallet CreditEPSS 0.2%CVE-2026-33867CRITICALAVideo has Plaintext Video Password StorageEPSS 0.2%CVE-2026-89148MEDIUMAVideo Open Redirect via playlistSort.php Referer HeaderEPSS 0.2%CVE-2026-89245HIGHWWBN AVideo Cross-Site Request Forgery via playlistRemove.phpEPSS 0.1%CVE-2026-90542MEDIUMWWBN AVideo Missing Authorization via remindMe.json.phpEPSS 0.1%CVE-2026-58002HIGHWWBN AVideo Authorization Bypass via Users_affiliations add.json.phpEPSS 0.1%CVE-2026-84482HIGHWWBN AVideo Cross-Site Request Forgery via get_domain() validationEPSS 0.1%