Skip to content
Noroxi

WWBN records

193 published records for vendor WWBN. 0 of them have been exploited in the wild (listed in CISA KEV) and 5 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
5 · 2.6%
Pre-auth RCE
16
With a fix record
13%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

193 records
  • CVE-2024-31819
    60This week

    An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the sub

    CriticalCVSS 9.8WeaponizedEPSS 15%

    wwbn · avideoApr 10, 2024

  • CVE-2026-29058
    60This week

    AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

    CriticalCVSS 9.8WeaponizedEPSS 8%

    wwbn · avideo-encoderMar 6, 2026

  • CVE-2026-28501
    60This week

    WWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php

    CriticalCVSS 9.8WeaponizedEPSS 1%

    wwbn · avideoMar 6, 2026

  • CVE-2025-34442
    60This week

    AVideo < 20.1 System Path Disclosure via Public API

    MediumCVSS 6.9WeaponizedEPSS 0%

    wwbn · avideoDec 17, 2025

  • CVE-2025-34441
    60This week

    AVideo < 20.1 User Information Disclosure via Public API

    MediumCVSS 6.9WeaponizedEPSS 0%

    wwbn · avideoDec 17, 2025

  • CVE-2022-30534
    58Plan

    An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364

    HighCVSS 8.8No exploitEPSS 75%

    wwbn · avideoAug 22, 2022

  • CVE-2022-30547
    58Plan

    A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

    CriticalCVSS 9.9No exploitEPSS 64%

    wwbn · avideoAug 22, 2022

  • CVE-2022-30690
    49Plan

    A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

    MediumCVSS 6.1No exploitEPSS 83%

    wwbn · avideoAug 22, 2022

  • CVE-2026-33478
    44Plan

    AVideo Multi-Chain Attack: Unauthenticated Remote Code Execution via Clone Key Disclosure, Database Dump, and Command Injection

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    wwbn · avideoMar 23, 2026

  • CVE-2022-32572
    43Plan

    An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

    HighCVSS 8.8No exploitEPSS 25%

    wwbn · avideoAug 22, 2022

  • CVE-2026-40911
    40Plan

    WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() Sinks

    CriticalCVSS 10.0No exploitEPSS 0%

    wwbn · avideoApr 21, 2026

  • CVE-2022-26842
    39Monitor

    A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master com

    CriticalCVSS 9.6No exploitEPSS 3%

    wwbn · avideoAug 22, 2022

  • CVE-2025-48732
    39Monitor

    An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff.

    CriticalCVSS 9.8No exploitEPSS 1%

    wwbn · avideoJul 24, 2025

  • CVE-2023-25313
    39Monitor

    OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the vi

    CriticalCVSS 9.8No exploitEPSS 1%

    wwbn · avideoApr 25, 2023

  • CVE-2023-47862
    39Monitor

    A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb.

    CriticalCVSS 9.8No exploitEPSS 1%

    wwbn · avideoJan 10, 2024

  • CVE-2023-49599
    39Monitor

    An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb.

    CriticalCVSS 9.8No exploitEPSS 0%

    wwbn · avideoJan 10, 2024

  • CVE-2026-29093
    39Monitor

    WWBN AVideo: Unauthenticated PHP session store exposed to host network via published memcached port

    CriticalCVSS 9.8No exploitEPSS 0%

    wwbn · avideoMar 6, 2026

  • CVE-2026-33352
    39Monitor

    AVideo has an Unauthenticated SQL Injection via `doNotShowCats` Parameter (Backslash Escape Bypass)

    CriticalCVSS 9.8No exploitEPSS 0%

    wwbn · avideoMar 23, 2026

  • CVE-2025-41420
    38Monitor

    A cross-site scripting (xss) vulnerability exists in the userLogin cancelUri parameter functionality of WWBN AVideo 14.4 and dev master comm

    CriticalCVSS 9.6No exploitEPSS 1%

    wwbn · avideoJul 24, 2025

  • CVE-2025-36548
    38Monitor

    A cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of WWBN AVideo 14.4 and

    CriticalCVSS 9.6No exploitEPSS 1%

    wwbn · avideoJul 24, 2025

  • CVE-2023-32073
    37Monitor

    AVideo command injection vulnerability

    HighCVSS 8.8Proof of conceptEPSS 6%

    wwbn · avideoMay 12, 2023

  • CVE-2023-30854
    37Monitor

    WWBN AVideo vulnerable to OS Command Injection

    HighCVSS 8.8Proof of conceptEPSS 5%

    wwbn · avideoApr 28, 2023

  • CVE-2022-28712
    37Monitor

    A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

    CriticalCVSS 9.0No exploitEPSS 3%

    wwbn · avideoAug 22, 2022

  • CVE-2026-28502
    37Monitor

    WWBN AVideo: Authenticated Remote Code Execution via Unsafe Plugin ZIP Extraction

    CriticalCVSS 9.3No exploitEPSS 0%

    wwbn · avideoMar 6, 2026

  • CVE-2025-34434
    37Monitor

    AVideo < 20.1 ImageGallery Plugin Unauthenticated File Upload and Deletion

    CriticalCVSS 9.3No exploitEPSS 0%

    wwbn · avideoDec 17, 2025