Product by WWBN

    WWBN AVideo

    348 known vulnerabilities in WWBN AVideo (WWBN), 0 of them actively exploited (CISA KEV).

    Key figures

    348

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    64

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WWBN AVideo (WWBN)
    CriticalCVE-2026-33478

    WWBN AVideo: OS Command Injection

    10.0
    CriticalCVE-2022-30534

    WWBN AVideo: OS Command Injection

    9.9
    CriticalCVE-2022-30547

    WWBN AVideo: Path Traversal

    9.9
    CriticalCVE-2024-31819

    WWBN AVideo: Code Execution

    9.8
    CriticalCVE-2022-30690

    WWBN AVideo: Cross-site Scripting

    9.6
    CriticalCVE-2022-32572

    WWBN AVideo: OS Command Injection

    9.9
    HighCVE-2026-33482

    AVideo has an OS Command Injection via $() Shell Substitution Bypass in sanitizeFFmpegCommand()

    8.1
    HighCVE-2026-55173

    WWBN AVideo: OS Command Injection

    8.1
    CriticalCVE-2026-41304

    WWBN AVideo vulnerable to RCE caused by clonesite plugin

    9.8
    HighCVE-2023-32073

    AVideo command injection vulnerability

    8.8
    CriticalCVE-2022-32770

    WWBN AVideo: Cross-site Scripting

    9.6
    CriticalCVE-2022-32771

    WWBN AVideo: Cross-site Scripting

    9.6
    CriticalCVE-2026-63305

    AVideo through 29.0 OS Command Injection via ffmpeg.json.php

    8.1
    CriticalCVE-2026-63304

    AVideo through 29.0 OS Command Injection via listFFmpegProcesses

    8.1
    CriticalCVE-2022-32772

    WWBN AVideo: Cross-site Scripting

    9.6
    HighCVE-2023-30854

    WWBN AVideo vulnerable to OS Command Injection

    8.8
    CriticalCVE-2022-26842

    WWBN AVideo: Cross-site Scripting

    9.6
    HighCVE-2026-92580

    AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF

    8.8
    HighCVE-2022-30605

    WWBN AVideo: Session Fixation

    8.8
    CriticalCVE-2026-28501

    WWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php

    9.8
    CriticalCVE-2022-28712

    WWBN AVideo: Cross-site Scripting

    9.0
    CriticalCVE-2023-48728

    WWBN AVideo: Cross-site Scripting

    9.6
    CriticalCVE-2026-72748

    AVideo Unauthenticated Arbitrary File Write via aVideoEncoderChunk.json.php

    9.1
    CriticalCVE-2025-41420

    WWBN AVideo: Cross-site Scripting

    9.6
    HighCVE-2020-23489

    WWBN AVideo: Privilege Escalation

    8.8

    All vulnerabilities in search

    News

    All products by WWBN