Product by WWBN
WWBN AVideo
348 known vulnerabilities in WWBN AVideo (WWBN), 0 of them actively exploited (CISA KEV).
Key figures
348
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
64
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-33478 | WWBN AVideo: OS Command Injection | 10.0 | |
| Critical | CVE-2022-30534 | WWBN AVideo: OS Command Injection | 9.9 | |
| Critical | CVE-2022-30547 | WWBN AVideo: Path Traversal | 9.9 | |
| Critical | CVE-2024-31819 | WWBN AVideo: Code Execution | 9.8 | |
| Critical | CVE-2022-30690 | WWBN AVideo: Cross-site Scripting | 9.6 | |
| Critical | CVE-2022-32572 | WWBN AVideo: OS Command Injection | 9.9 | |
| High | CVE-2026-33482 | AVideo has an OS Command Injection via $() Shell Substitution Bypass in sanitizeFFmpegCommand() | 8.1 | |
| High | CVE-2026-55173 | WWBN AVideo: OS Command Injection | 8.1 | |
| Critical | CVE-2026-41304 | WWBN AVideo vulnerable to RCE caused by clonesite plugin | 9.8 | |
| High | CVE-2023-32073 | AVideo command injection vulnerability | 8.8 | |
| Critical | CVE-2022-32770 | WWBN AVideo: Cross-site Scripting | 9.6 | |
| Critical | CVE-2022-32771 | WWBN AVideo: Cross-site Scripting | 9.6 | |
| Critical | CVE-2026-63305 | AVideo through 29.0 OS Command Injection via ffmpeg.json.php | 8.1 | |
| Critical | CVE-2026-63304 | AVideo through 29.0 OS Command Injection via listFFmpegProcesses | 8.1 | |
| Critical | CVE-2022-32772 | WWBN AVideo: Cross-site Scripting | 9.6 | |
| High | CVE-2023-30854 | WWBN AVideo vulnerable to OS Command Injection | 8.8 | |
| Critical | CVE-2022-26842 | WWBN AVideo: Cross-site Scripting | 9.6 | |
| High | CVE-2026-92580 | AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF | 8.8 | |
| High | CVE-2022-30605 | WWBN AVideo: Session Fixation | 8.8 | |
| Critical | CVE-2026-28501 | WWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php | 9.8 | |
| Critical | CVE-2022-28712 | WWBN AVideo: Cross-site Scripting | 9.0 | |
| Critical | CVE-2023-48728 | WWBN AVideo: Cross-site Scripting | 9.6 | |
| Critical | CVE-2026-72748 | AVideo Unauthenticated Arbitrary File Write via aVideoEncoderChunk.json.php | 9.1 | |
| Critical | CVE-2025-41420 | WWBN AVideo: Cross-site Scripting | 9.6 | |
| High | CVE-2020-23489 | WWBN AVideo: Privilege Escalation | 8.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,