CVE Tools
Track your stack

Avideo

355 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Avideo, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Avideo CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Avideo CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-077
2025-080
2025-090
2025-100
2025-110
2025-1210
2026-010
2026-025
2026-0381
2026-0431
2026-0522
2026-065
2026-0713
2026-0818
2026-09107
2026-107
2026-111

Severity

How the 355 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical3510%
  • High13940%
  • Medium17249%
  • Low21%

Latest CVEs

The 15 most recently published vulnerabilities affecting Avideo.

  1. CVE-2026-123486WWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.php5.3
  2. CVE-2026-116800WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header6.2
  3. CVE-2026-116139WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering5.4
  4. CVE-2026-114634WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect4.3
  5. CVE-2026-114633WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.php6.5
  6. CVE-2026-114048WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video Endpoints3.5
  7. CVE-2026-105086WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title8.7
  8. CVE-2026-105089WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates8.7
  9. CVE-2026-100630AVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 Field5.4
  10. CVE-2026-92915WWBN AVideo userVerifyEmail.php Unauthenticated Access Control7.3
  11. CVE-2026-92914AVideo LoginControl PGP Second Factor Authentication Bypass8.1
  12. CVE-2026-92913AVideo Weak PRNG Activation Code Authentication Bypass7.4
  13. CVE-2026-92912AVideo Cryptographically Weak PRNG via uniqid Stream Key6.5
  14. CVE-2026-92586AVideo through 29.0 Missing Authorization via comment API endpoint4.3
  15. CVE-2026-92585AVideo through 29.0 Missing Authorization Check via API Like Endpoint4.3

Product grouping is registry-driven, with AI assist and human review. How it works