Vulnerabilidades en WWBN
339 resultadosCVE-2026-33650HIGHAVideo's Video Moderator Privilege Escalation via Ownership Transfer Enables Arbitrary Video DeletionEPSS 0.2%CVE-2026-33512HIGHAVideo has an unauthenticated decrypt oracle leaking any ciphertextEPSS 0.2%CVE-2026-34394HIGHAVideo: CSRF on Admin Plugin Configuration Enables Payment Credential HijackingEPSS 0.2%CVE-2026-33766MEDIUMAVideo has SSRF Protection Bypass via HTTP Redirect in Image Download EndpointsEPSS 0.2%CVE-2026-34738MEDIUMAVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request ParameterEPSS 0.2%CVE-2026-33499MEDIUMAVideo has Reflected XSS via unlockPassword Parameter in forbiddenPage.php and warningPage.phpEPSS 0.2%CVE-2026-90542MEDIUMWWBN AVideo Missing Authorization via remindMe.json.phpEPSS 0.2%CVE-2026-34368MEDIUMAVideo Vulnerable to Wallet Balance Double-Spend via TOCTOU Race Condition in transferBalanceEPSS 0.2%CVE-2026-89246MEDIUMWWBN AVideo CSV Formula Injection via myComments.download.phpEPSS 0.2%CVE-2026-64626MEDIUMAVideo Encoder downloadURL SSRF via unpinned retry fallbackEPSS 0.2%CVE-2026-33723HIGHAVideo Vulnerable to SQL Injection in Subscribe Endpoint via Unsanitized user_id Parameter in subscribe.phpEPSS 0.2%CVE-2026-83595HIGHAVideo Cross-Site Request Forgery via plugin/API/set.json.phpEPSS 0.2%CVE-2026-116139MEDIUMWWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown RenderingEPSS 0.2%CVE-2026-34396MEDIUMAVideo: Stored XSS via Unescaped Plugin Configuration Values in Admin PanelEPSS 0.2%CVE-2026-33500MEDIUMAVideo Vulnerable to Stored XSS via Markdown `javascript:` URI Bypasses ParsedownSafeWithLinks SanitizationEPSS 0.2%CVE-2026-34739MEDIUMAVideo: Reflected XSS via Unescaped ip Parameter in User_Location testIP.phpEPSS 0.2%CVE-2026-35179MEDIUMWWBN AVideo Unauthenticated Instagram Graph API Proxy via publishInstagram.json.phpEPSS 0.2%CVE-2026-81733MEDIUMWWBN AVideo through 30.0 CSRF via myLiveControls.save.json.phpEPSS 0.2%CVE-2026-33764MEDIUMAVideo: IDOR in AI Plugin Allows Stealing Other Users' AI-Generated Metadata and TranscriptionsEPSS 0.2%CVE-2026-50182MEDIUMAVideo Has Unauthenticated Reflected XSS via $_GET['search'] in YouTubeAPI Gallery PaginationEPSS 0.2%