Avideo

This hub aggregates every CVE we track for Avideo, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Avideo.

• CVE-2026-92915WWBN AVideo userVerifyEmail.php Unauthenticated Access Control7.3Sep 17, 2026
• CVE-2026-92914AVideo LoginControl PGP Second Factor Authentication Bypass8.1Sep 17, 2026
• CVE-2026-92913AVideo Weak PRNG Activation Code Authentication Bypass7.4Sep 17, 2026
• CVE-2026-92912AVideo Cryptographically Weak PRNG via uniqid Stream Key6.5Sep 17, 2026
• CVE-2026-92585AVideo through 29.0 Missing Authorization Check via API Like Endpoint4.3Sep 16, 2026
• CVE-2026-92586AVideo through 29.0 Missing Authorization via comment API endpoint4.3Sep 16, 2026
• CVE-2026-92584AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Header6.1Sep 16, 2026
• CVE-2026-92583AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter Increment6.5Sep 16, 2026
• CVE-2026-92582AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypass7.1Sep 16, 2026
• CVE-2026-92581AVideo through 29.0 Like Counter Desynchronization via Array Parameter4.3Sep 16, 2026
• CVE-2026-92580AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF8.8Sep 16, 2026
• CVE-2026-92579AVideo through 29.0 Broken Access Control via CSRF Exemption Basename Collision5.4Sep 16, 2026
• CVE-2026-92578WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash8.1Sep 16, 2026
• CVE-2026-92577AVideo through 29.0 API get_api_video Broken Access Control via clean_title7.5Sep 16, 2026
• CVE-2026-91967AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL5.0Sep 15, 2026