WWBN
Number 55 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: WWBN, wwbn
Total vulnerabilities
346
Critical
43
High
139
Known Exploited
0
Exploit available
2
Network, no login needed
60.4%
Of 346 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 298 | 25 | 119 | 151 | 3 | 0 |
| 2025 | 7 | 4 | 3 | 0 | 0 | 0 |
| 2024 | 15 | 5 | 4 | 6 | 0 | 0 |
| 2023 | 3 | 0 | 3 | 0 | 0 | 0 |
| 2022 | 22 | 9 | 9 | 4 | 0 | 0 |
| 2021 | 1 | 0 | 1 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| AVideo | 335 | 173 |
| AVideo-Encoder | 10 | 8 |
| avideo | 1 | 1 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Cross-Site Scripting | 65 | 33 |
| Cross-Site Request Forgery | 32 | 13 |
| Server-Side Request Forgery | 25 | 14 |
| Missing Authorization | 24 | 1 |
| Authentication Issues | 23 | 17 |
| Information Disclosure | 23 | 6 |
| Command Injection | 18 | 17 |
| SQL Injection | 16 | 16 |
| Path Traversal | 15 | 10 |
| Insecure Direct Object Reference | 13 | 5 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-126545 | WWBN AVideo through 29.7.1 Missing Authorization via get_api_tags API | Medium | n/a | |
| CVE-2026-126544 | WWBN AVideo 6.5 through 29.7.1 Email Verification Bypass via User::verifyCode() | Medium | n/a | |
| CVE-2026-126543 | WWBN AVideo through 29.7.1 Wallet Credit Manipulation via PayPalYPT ipnV2.php | High | n/a | |
| CVE-2026-126542 | WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social Login | Critical | n/a | |
| CVE-2026-126541 | WWBN AVideo through 29.7.1 Missing Authorization via Live Restream Endpoints | High | n/a | |
| CVE-2026-124424 | WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.php | High | 0.4% | |
| CVE-2026-123486 | WWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.php | Medium | 0.2% | |
| CVE-2026-61575 | AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles | Medium | 0.2% | |
| CVE-2026-61573 | AVideo-Encoder: reflected cross-site scripting in the login interface | Medium | 0.3% | |
| CVE-2026-61572 | AVideo-Encoder: unauthenticated full-response server-side request forgery | High | 0.3% |