agentprime: wwbn-avideoEvery new CVE for wwbn-avideo.https://agentprime.io/CVE-2026-116800: WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Headerhttps://agentprime.io/advisories/CVE-2026-116800/https://agentprime.io/advisories/CVE-2026-116800/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 23:05:33 GMTCVECVE-2026-116139: WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Renderinghttps://agentprime.io/advisories/CVE-2026-116139/https://agentprime.io/advisories/CVE-2026-116139/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:19:51 GMTCVECVE-2026-114634: WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirecthttps://agentprime.io/advisories/CVE-2026-114634/https://agentprime.io/advisories/CVE-2026-114634/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 01:43:35 GMTCVECVE-2026-114633: WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.phphttps://agentprime.io/advisories/CVE-2026-114633/https://agentprime.io/advisories/CVE-2026-114633/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 01:43:33 GMTCVECVE-2026-114048: WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpointshttps://agentprime.io/advisories/CVE-2026-114048/https://agentprime.io/advisories/CVE-2026-114048/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:26 GMTCVECVE-2026-105086: WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Titlehttps://agentprime.io/advisories/CVE-2026-105086/https://agentprime.io/advisories/CVE-2026-105086/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 04 Oct 2026 15:10:23 GMTCVEcriticalCVE-2026-105089: WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templateshttps://agentprime.io/advisories/CVE-2026-105089/https://agentprime.io/advisories/CVE-2026-105089/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 04 Oct 2026 15:04:53 GMTCVEcriticalCVE-2026-100630: AVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 Fieldhttps://agentprime.io/advisories/CVE-2026-100630/https://agentprime.io/advisories/CVE-2026-100630/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:06 GMTCVECVE-2026-92915: WWBN AVideo userVerifyEmail.php Unauthenticated Access Controlhttps://agentprime.io/advisories/CVE-2026-92915/https://agentprime.io/advisories/CVE-2026-92915/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 11:16:43 GMTCVECVE-2026-92914: AVideo LoginControl PGP Second Factor Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-92914/https://agentprime.io/advisories/CVE-2026-92914/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 11:16:43 GMTCVECVE-2026-92913: AVideo Weak PRNG Activation Code Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-92913/https://agentprime.io/advisories/CVE-2026-92913/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 11:16:42 GMTCVEcriticalCVE-2026-92912: AVideo Cryptographically Weak PRNG via uniqid Stream Keyhttps://agentprime.io/advisories/CVE-2026-92912/https://agentprime.io/advisories/CVE-2026-92912/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 11:16:41 GMTCVECVE-2026-92586: AVideo through 29.0 Missing Authorization via comment API endpointhttps://agentprime.io/advisories/CVE-2026-92586/https://agentprime.io/advisories/CVE-2026-92586/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:52 GMTCVECVE-2026-92585: AVideo through 29.0 Missing Authorization Check via API Like Endpointhttps://agentprime.io/advisories/CVE-2026-92585/https://agentprime.io/advisories/CVE-2026-92585/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:52 GMTCVECVE-2026-92584: AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Headerhttps://agentprime.io/advisories/CVE-2026-92584/https://agentprime.io/advisories/CVE-2026-92584/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:51 GMTCVECVE-2026-92583: AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter Incrementhttps://agentprime.io/advisories/CVE-2026-92583/https://agentprime.io/advisories/CVE-2026-92583/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:50 GMTCVECVE-2026-92582: AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypasshttps://agentprime.io/advisories/CVE-2026-92582/https://agentprime.io/advisories/CVE-2026-92582/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:50 GMTCVECVE-2026-92581: AVideo through 29.0 Like Counter Desynchronization via Array Parameterhttps://agentprime.io/advisories/CVE-2026-92581/https://agentprime.io/advisories/CVE-2026-92581/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:49 GMTCVECVE-2026-92580: AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRFhttps://agentprime.io/advisories/CVE-2026-92580/https://agentprime.io/advisories/CVE-2026-92580/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:48 GMTCVECVE-2026-92579: AVideo through 29.0 Broken Access Control via CSRF Exemption Basename Collisionhttps://agentprime.io/advisories/CVE-2026-92579/https://agentprime.io/advisories/CVE-2026-92579/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:47 GMTCVECVE-2026-92578: WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hashhttps://agentprime.io/advisories/CVE-2026-92578/https://agentprime.io/advisories/CVE-2026-92578/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:47 GMTCVEcriticalCVE-2026-92577: AVideo through 29.0 API get_api_video Broken Access Control via clean_titlehttps://agentprime.io/advisories/CVE-2026-92577/https://agentprime.io/advisories/CVE-2026-92577/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:46 GMTCVECVE-2026-91967: AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURLhttps://agentprime.io/advisories/CVE-2026-91967/https://agentprime.io/advisories/CVE-2026-91967/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:18:19 GMTCVECVE-2026-91966: AVideo through 29.0 Unauthenticated SSRF via Host Headerhttps://agentprime.io/advisories/CVE-2026-91966/https://agentprime.io/advisories/CVE-2026-91966/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:18:18 GMTCVECVE-2026-91965: WWBN AVideo through 29.0 Broken Access Control via Live Endpointshttps://agentprime.io/advisories/CVE-2026-91965/https://agentprime.io/advisories/CVE-2026-91965/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 15:18:18 GMTCVECVE-2026-90552: WWBN AVideo Missing Authorization via Playlists_schedules list.json.phphttps://agentprime.io/advisories/CVE-2026-90552/https://agentprime.io/advisories/CVE-2026-90552/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:56 GMTCVECVE-2026-90551: WWBN AVideo Missing Authorization via video_from_program APIhttps://agentprime.io/advisories/CVE-2026-90551/https://agentprime.io/advisories/CVE-2026-90551/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:55 GMTCVECVE-2026-90550: WWBN AVideo Missing Authorization via mediaSession.json.phphttps://agentprime.io/advisories/CVE-2026-90550/https://agentprime.io/advisories/CVE-2026-90550/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:54 GMTCVECVE-2026-90549: WWBN AVideo Missing Authorization via videosAndroid.json.php Endpointhttps://agentprime.io/advisories/CVE-2026-90549/https://agentprime.io/advisories/CVE-2026-90549/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:53 GMTCVECVE-2026-90548: WWBN AVideo Missing Authorization in ImageGallery list.json.phphttps://agentprime.io/advisories/CVE-2026-90548/https://agentprime.io/advisories/CVE-2026-90548/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:53 GMTCVECVE-2026-90547: WWBN AVideo Missing Authorization via getBookmarks.json.phphttps://agentprime.io/advisories/CVE-2026-90547/https://agentprime.io/advisories/CVE-2026-90547/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:52 GMTCVECVE-2026-90546: WWBN AVideo Missing Authorization via like.json.phphttps://agentprime.io/advisories/CVE-2026-90546/https://agentprime.io/advisories/CVE-2026-90546/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:51 GMTCVECVE-2026-90545: WWBN AVideo Missing Authorization via commentAddNew.json.phphttps://agentprime.io/advisories/CVE-2026-90545/https://agentprime.io/advisories/CVE-2026-90545/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:51 GMTCVECVE-2026-90544: WWBN AVideo Missing Authorization via videoAddViewCount.json.phphttps://agentprime.io/advisories/CVE-2026-90544/https://agentprime.io/advisories/CVE-2026-90544/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:50 GMTCVECVE-2026-90543: WWBN AVideo Missing Authentication via socketMessageLiveOwner.json.phphttps://agentprime.io/advisories/CVE-2026-90543/https://agentprime.io/advisories/CVE-2026-90543/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:49 GMTCVECVE-2026-90542: WWBN AVideo Missing Authorization via remindMe.json.phphttps://agentprime.io/advisories/CVE-2026-90542/https://agentprime.io/advisories/CVE-2026-90542/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:49 GMTCVECVE-2026-90541: WWBN AVideo Unauthenticated Information Disclosure via menus.json.phphttps://agentprime.io/advisories/CVE-2026-90541/https://agentprime.io/advisories/CVE-2026-90541/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:48 GMTCVECVE-2026-90540: WWBN AVideo Missing Authorization via playListAddVideo.json.phphttps://agentprime.io/advisories/CVE-2026-90540/https://agentprime.io/advisories/CVE-2026-90540/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:47 GMTCVECVE-2026-90539: WWBN AVideo Missing Authentication via menuItems.json.phphttps://agentprime.io/advisories/CVE-2026-90539/https://agentprime.io/advisories/CVE-2026-90539/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:46 GMTCVECVE-2026-90538: WWBN AVideo Missing Authorization via playlistsFromUser.json.phphttps://agentprime.io/advisories/CVE-2026-90538/https://agentprime.io/advisories/CVE-2026-90538/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:46 GMTCVECVE-2026-90537: WWBN AVideo Scheduler sendEmail Missing Authorization via Tokenhttps://agentprime.io/advisories/CVE-2026-90537/https://agentprime.io/advisories/CVE-2026-90537/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:45 GMTCVECVE-2026-90536: WWBN AVideo Missing Authorization via adsInfo API Endpointhttps://agentprime.io/advisories/CVE-2026-90536/https://agentprime.io/advisories/CVE-2026-90536/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 12:08:44 GMTCVECVE-2026-89257: AVideo through 29.0 Cross-User Category Asset Deletion via Missing Ownership Checkhttps://agentprime.io/advisories/CVE-2026-89257/https://agentprime.io/advisories/CVE-2026-89257/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 11:15:33 GMTCVECVE-2026-89256: AVideo Bookmark Plugin Stored XSS via Chapter Nameshttps://agentprime.io/advisories/CVE-2026-89256/https://agentprime.io/advisories/CVE-2026-89256/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 11:15:32 GMTCVEcriticalCVE-2026-89255: AVideo LoginControl Stored XSS via PGP Public Keyhttps://agentprime.io/advisories/CVE-2026-89255/https://agentprime.io/advisories/CVE-2026-89255/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 11:15:32 GMTCVEcriticalCVE-2026-89254: AVideo CustomizeUser Stored XSS via field_name Parameterhttps://agentprime.io/advisories/CVE-2026-89254/https://agentprime.io/advisories/CVE-2026-89254/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 11:15:31 GMTCVEcriticalCVE-2026-89253: AVideo Stored XSS via donationLink in watch page buttonhttps://agentprime.io/advisories/CVE-2026-89253/https://agentprime.io/advisories/CVE-2026-89253/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 11:15:30 GMTCVEcriticalCVE-2026-89252: AVideo Missing Authorization in addLiveLink.php LiveLink Updatehttps://agentprime.io/advisories/CVE-2026-89252/https://agentprime.io/advisories/CVE-2026-89252/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 11:15:30 GMTCVECVE-2026-89251: AVideo Missing Authorization via AD_Server log.php Wallet Credithttps://agentprime.io/advisories/CVE-2026-89251/https://agentprime.io/advisories/CVE-2026-89251/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 11:15:29 GMTCVECVE-2026-89250: WWBN AVideo Unauthenticated File Read via getRecordedFile.phphttps://agentprime.io/advisories/CVE-2026-89250/https://agentprime.io/advisories/CVE-2026-89250/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 11:15:28 GMTCVE