# WWBN AVideo.

Every CVE that names WWBN AVideo among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [WWBN AVideo Reflected XSS via Referer Header Comment Breakout](https://agentprime.io/advisories/CVE-2026-89239.md)
  `CVE-2026-89239` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Cross-site scripting (XSS)
- [AVideo Open Redirect via playlistSort.php Referer Header](https://agentprime.io/advisories/CVE-2026-89148.md)
  `CVE-2026-89148` · CVE record: WWBN AVideo · CVSS 5.1 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [AVideo PlayerSkins seo.php Missing Authorization Password-Protected VOD](https://agentprime.io/advisories/CVE-2026-88876.md)
  `CVE-2026-88876` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 10 Sept 2026 · Tags: Information disclosure
- [AVideo Incomplete API Sanitization Information Disclosure](https://agentprime.io/advisories/CVE-2026-88875.md)
  `CVE-2026-88875` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Information disclosure
- [AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication Bypass](https://agentprime.io/advisories/CVE-2026-88874.md)
  `CVE-2026-88874` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 10 Sept 2026 · Tags: Information disclosure
- [WWBN AVideo Cross-Site Request Forgery via logArchive.json.php](https://agentprime.io/advisories/CVE-2026-88873.md)
  `CVE-2026-88873` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [AVideo CustomizeUser setPassword.json.php CSRF](https://agentprime.io/advisories/CVE-2026-88872.md)
  `CVE-2026-88872` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WWBN AVideo CustomizeUser setSubscribers CSRF via GET](https://agentprime.io/advisories/CVE-2026-88871.md)
  `CVE-2026-88871` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WWBN AVideo LoginControl PGP Key CSRF via GET Request](https://agentprime.io/advisories/CVE-2026-88870.md)
  `CVE-2026-88870` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [AVideo AD_Server Stored XSS via log.php label parameter](https://agentprime.io/advisories/CVE-2026-88869.md)
  `CVE-2026-88869` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Cross-site scripting (XSS)
- [AVideo LiveLinks Stored XSS via title and description fields](https://agentprime.io/advisories/CVE-2026-88868.md)
  `CVE-2026-88868` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WWBN AVideo Stored XSS via Category Name and Icon Class](https://agentprime.io/advisories/CVE-2026-88867.md)
  `CVE-2026-88867` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WWBN AVideo LoginControl Stored XSS via User-Agent Header](https://agentprime.io/advisories/CVE-2026-88866.md)
  `CVE-2026-88866` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Cross-site scripting (XSS)
- [AVideo Missing Authorization via getRestream.json.php](https://agentprime.io/advisories/CVE-2026-88865.md)
  `CVE-2026-88865` · CVE record: WWBN AVideo · CVSS 8.6 High · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize](https://agentprime.io/advisories/CVE-2026-86729.md)
  `CVE-2026-86729` · CVE record: WWBN AVideo · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [AVideo through 29.0 Unauthenticated Disclosure via epg.json.php](https://agentprime.io/advisories/CVE-2026-86728.md)
  `CVE-2026-86728` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [AVideo through 29.0 Information Disclosure via stats.json.php](https://agentprime.io/advisories/CVE-2026-86727.md)
  `CVE-2026-86727` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [AVideo through 29.0 Information Disclosure via restreamsActive.json.php](https://agentprime.io/advisories/CVE-2026-86726.md)
  `CVE-2026-86726` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Hard-coded credentials
- [AVideo SocialMediaPublisher Missing Authorization via add.json.php](https://agentprime.io/advisories/CVE-2026-86725.md)
  `CVE-2026-86725` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [AVideo YPTWallet saveBalance.php Cross-Site Request Forgery](https://agentprime.io/advisories/CVE-2026-86724.md)
  `CVE-2026-86724` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [AVideo LoginControl PGP Authentication Bypass via verifyChallenge](https://agentprime.io/advisories/CVE-2026-86723.md)
  `CVE-2026-86723` · CVE record: WWBN AVideo · CVSS 8.6 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [AVideo Authentication Bypass via SQL Cache Invalidation](https://agentprime.io/advisories/CVE-2026-86722.md)
  `CVE-2026-86722` · CVE record: WWBN AVideo · CVSS 8.6 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [AVideo through c3edcc274c Authorization Bypass via Session Cookie](https://agentprime.io/advisories/CVE-2026-86721.md)
  `CVE-2026-86721` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [WWBN AVideo Missing Authorization via resendRestreamer.json.php](https://agentprime.io/advisories/CVE-2026-86720.md)
  `CVE-2026-86720` · CVE record: WWBN AVideo · CVSS 8.6 High · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking](https://agentprime.io/advisories/CVE-2026-86719.md)
  `CVE-2026-86719` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.php](https://agentprime.io/advisories/CVE-2026-86718.md)
  `CVE-2026-86718` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter](https://agentprime.io/advisories/CVE-2026-86190.md)
  `CVE-2026-86190` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2026 · Tags: Information disclosure
- [WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php](https://agentprime.io/advisories/CVE-2026-86189.md)
  `CVE-2026-86189` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2026 · Tags: Path traversal
- [AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting](https://agentprime.io/advisories/CVE-2026-86188.md)
  `CVE-2026-86188` · CVE record: WWBN AVideo · CVSS 6.9 Medium · Not analysed yet · Published 5 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WWBN AVideo Weak PRNG Password Generation via External Login](https://agentprime.io/advisories/CVE-2026-86187.md)
  `CVE-2026-86187` · CVE record: WWBN AVideo · CVSS 7.4 High · Not analysed yet · Published 5 Sept 2026 · Tags: Weak cryptography or TLS
- [AVideo API Rate Limit Bypass via Bot User-Agent Header](https://agentprime.io/advisories/CVE-2026-86186.md)
  `CVE-2026-86186` · CVE record: WWBN AVideo · CVSS 6.3 Medium · Not analysed yet · Published 5 Sept 2026 · Tags: Authentication bypass
- [AVideo userLogin.php Reflected XSS via error parameter](https://agentprime.io/advisories/CVE-2026-85577.md)
  `CVE-2026-85577` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WWBN AVideo Server-Side Request Forgery via set_api_userImages](https://agentprime.io/advisories/CVE-2026-85164.md)
  `CVE-2026-85164` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 3 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [AVideo Server-Side Request Forgery via epg_link parameter](https://agentprime.io/advisories/CVE-2026-85163.md)
  `CVE-2026-85163` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 3 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [AVideo through c91b5975d CSRF via saveLive.php](https://agentprime.io/advisories/CVE-2026-85162.md)
  `CVE-2026-85162` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 3 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [AVideo removePoster.php Cross-Site Request Forgery File Deletion](https://agentprime.io/advisories/CVE-2026-85161.md)
  `CVE-2026-85161` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [AVideo through c91b5975d CSRF and Path Traversal via stopLive.php](https://agentprime.io/advisories/CVE-2026-85160.md)
  `CVE-2026-85160` · CVE record: WWBN AVideo · CVSS 7.2 High · Not analysed yet · Published 3 Sept 2026 · Tags: Path traversal
- [AVideo Reflected XSS via cancelUri in userLogin.php](https://agentprime.io/advisories/CVE-2026-85159.md)
  `CVE-2026-85159` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Cross-site scripting (XSS)
- [AVideo Reflected XSS via videoEmbeded.php link parameter](https://agentprime.io/advisories/CVE-2026-85158.md)
  `CVE-2026-85158` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WWBN AVideo Broken Access Control via feed/index.php program_id](https://agentprime.io/advisories/CVE-2026-85157.md)
  `CVE-2026-85157` · CVE record: WWBN AVideo · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Information disclosure
- [WWBN AVideo Broken Access Control via Channel Page](https://agentprime.io/advisories/CVE-2026-85156.md)
  `CVE-2026-85156` · CVE record: WWBN AVideo · CVSS 6.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Information disclosure
- [WWBN AVideo SQL Injection via get.json.php APIName channels](https://agentprime.io/advisories/CVE-2026-85155.md)
  `CVE-2026-85155` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 3 Sept 2026 · Tags: SQL injection
- [WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash](https://agentprime.io/advisories/CVE-2026-85154.md)
  `CVE-2026-85154` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Privilege escalation
- [WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.php](https://agentprime.io/advisories/CVE-2026-84483.md)
  `CVE-2026-84483` · CVE record: WWBN AVideo · CVSS 6.9 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Hard-coded credentials
- [WWBN AVideo Cross-Site Request Forgery via get_domain() validation](https://agentprime.io/advisories/CVE-2026-84482.md)
  `CVE-2026-84482` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-346
- [WWBN AVideo through 30.0 Information Disclosure via MobileManager](https://agentprime.io/advisories/CVE-2026-84481.md)
  `CVE-2026-84481` · CVE record: WWBN AVideo · CVSS 6.9 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Information disclosure
- [WWBN AVideo Password Recovery Token Expiration Bypass](https://agentprime.io/advisories/CVE-2026-84480.md)
  `CVE-2026-84480` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: Authentication bypass
- [WWBN AVideo Authentication Bypass via User-Agent Header](https://agentprime.io/advisories/CVE-2026-84479.md)
  `CVE-2026-84479` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: Authentication bypass
- [WWBN AVideo Unauthenticated Arbitrary Log File Deletion](https://agentprime.io/advisories/CVE-2026-84478.md)
  `CVE-2026-84478` · CVE record: WWBN AVideo · CVSS 6.9 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Path traversal
- [AVideo Stored XSS via Live Schedule Title Description](https://agentprime.io/advisories/CVE-2026-84477.md)
  `CVE-2026-84477` · CVE record: WWBN AVideo · CVSS 5.1 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Cross-site scripting (XSS)
- [WWBN AVideo Authentication Bypass via X-Real-IP Header](https://agentprime.io/advisories/CVE-2026-84476.md)
  `CVE-2026-84476` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 1 Sept 2026 · Tags: Authentication bypass
- [AVideo User_Location Plugin Unauthenticated SQL Injection](https://agentprime.io/advisories/CVE-2026-84208.md)
  `CVE-2026-84208` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 1 Sept 2026 · Tags: SQL injection
- [AVideo on_publish.php Missing Authentication Check via RTMP Callback](https://agentprime.io/advisories/CVE-2026-84187.md)
  `CVE-2026-84187` · CVE record: WWBN AVideo · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Broken access control
- [AVideo Cross-Site Request Forgery via plugin/API/set.json.php](https://agentprime.io/advisories/CVE-2026-83595.md)
  `CVE-2026-83595` · CVE record: WWBN AVideo · CVSS 7.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [WWBN AVideo SSRF Filter Bypass via NAT64 Hex Address](https://agentprime.io/advisories/CVE-2026-82648.md)
  `CVE-2026-82648` · CVE record: WWBN AVideo · CVSS 7.1 High · Not analysed yet · Published 30 Aug 2026 · Tags: CWE-20
- [WWBN AVideo Cross-Site Request Forgery via sendEmail.json.php](https://agentprime.io/advisories/CVE-2026-82647.md)
  `CVE-2026-82647` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Cross-site request forgery (CSRF)
- [WWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.php](https://agentprime.io/advisories/CVE-2026-82646.md)
  `CVE-2026-82646` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Cross-site scripting (XSS)
- [AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token](https://agentprime.io/advisories/CVE-2026-82645.md)
  `CVE-2026-82645` · CVE record: WWBN AVideo · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Aug 2026 · Tags: Weak cryptography or TLS
- [WWBN AVideo Brute-force Rate Limiting Bypass via Missing User-Agent](https://agentprime.io/advisories/CVE-2026-82644.md)
  `CVE-2026-82644` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 30 Aug 2026 · Tags: Authentication bypass
- [WWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.php](https://agentprime.io/advisories/CVE-2026-82643.md)
  `CVE-2026-82643` · CVE record: WWBN AVideo · CVSS 6.9 Medium · Not analysed yet · Published 30 Aug 2026 · Tags: Authentication bypass

Newest: <https://agentprime.io/advisories/technology/wwbn-avideo.md>
Older: <https://agentprime.io/advisories/technology/wwbn-avideo.md?cursor=WyIyMDI2LTA4LTMwVDE0OjMzOjI3LjY1NTAwMFoiLCJDVkUtMjAyNi04MjY0MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=wwbn-avideo&cursor=WyIyMDI2LTA5LTExVDExOjE1OjIxLjY1MDAwMFoiLCJDVkUtMjAyNi04OTI0MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/wwbn-avideo/?cursor=WyIyMDI2LTA5LTExVDExOjE1OjIxLjY1MDAwMFoiLCJDVkUtMjAyNi04OTI0MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.