Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WWBN — Vulnerabilities & Security Advisories 329

Browse all 329 CVE security advisories affecting WWBN. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WWBN operates as a provider of web-based business solutions, primarily focusing on content management and e-commerce platforms that enable organizations to manage digital assets and online transactions. Historically, its software has been susceptible to a wide array of critical vulnerabilities, including Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from insufficient input validation and outdated dependencies. These flaws have frequently allowed attackers to escalate privileges, execute arbitrary commands, or exfiltrate sensitive data. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) indicates persistent security challenges within the codebase, reflecting difficulties in maintaining rigorous patch management and secure coding practices over time. Consequently, organizations deploying WWBN solutions face significant risks if they do not implement robust network segmentation and timely updates to mitigate these known attack vectors.

Found 326 results / 329 Clear Filters
Top products by WWBN: AVideo AVideo-Encoder
CVE ID Title CVSS Severity Published
CVE-2026-90545 WWBN AVideo Missing Authorization via commentAddNew.json.php — AVideo CWE-862 4.3 Medium 2026-09-12
CVE-2026-90543 WWBN AVideo Missing Authentication via socketMessageLiveOwner.json.php — AVideo CWE-306 5.3 Medium 2026-09-12
CVE-2026-90544 WWBN AVideo Missing Authorization via videoAddViewCount.json.php — AVideo CWE-862 4.3 Medium 2026-09-12
CVE-2026-90542 WWBN AVideo Missing Authorization via remindMe.json.php — AVideo CWE-639 5.4 Medium 2026-09-12
CVE-2026-90540 WWBN AVideo Missing Authorization via playListAddVideo.json.php — AVideo CWE-862 4.3 Medium 2026-09-12
CVE-2026-90541 WWBN AVideo Unauthenticated Information Disclosure via menus.json.php — AVideo CWE-200 5.3 Medium 2026-09-12
CVE-2026-90539 WWBN AVideo Missing Authentication via menuItems.json.php — AVideo CWE-200 5.3 Medium 2026-09-12
CVE-2026-90537 WWBN AVideo Scheduler sendEmail Missing Authorization via Token — AVideo CWE-862 8.2 High 2026-09-12
CVE-2026-90538 WWBN AVideo Missing Authorization via playlistsFromUser.json.php — AVideo CWE-200 5.3 Medium 2026-09-12
CVE-2026-90536 WWBN AVideo Missing Authorization via adsInfo API Endpoint — AVideo CWE-200 5.3 Medium 2026-09-12
CVE-2026-89257 AVideo through 29.0 Cross-User Category Asset Deletion via Missing Ownership Check — AVideo CWE-639 5.4 Medium 2026-09-11
CVE-2026-89256 AVideo Bookmark Plugin Stored XSS via Chapter Names — AVideo CWE-79 8.7 High 2026-09-11
CVE-2026-89255 AVideo LoginControl Stored XSS via PGP Public Key — AVideo CWE-79 8.7 High 2026-09-11
CVE-2026-89254 AVideo CustomizeUser Stored XSS via field_name Parameter — AVideo CWE-79 8.7 High 2026-09-11
CVE-2026-89253 AVideo Stored XSS via donationLink in watch page button — AVideo CWE-79 8.7 High 2026-09-11
CVE-2026-89252 AVideo Missing Authorization in addLiveLink.php LiveLink Update — AVideo CWE-639 6.5 Medium 2026-09-11
CVE-2026-89251 AVideo Missing Authorization via AD_Server log.php Wallet Credit — AVideo CWE-345 6.5 Medium 2026-09-11
CVE-2026-89250 WWBN AVideo Unauthenticated File Read via getRecordedFile.php — AVideo CWE-306 7.5 High 2026-09-11
CVE-2026-89249 AVideo YPTWallet Stored XSS via CryptoWallet Configuration — AVideo CWE-79 8.7 High 2026-09-11
CVE-2026-89247 WWBN AVideo XML Injection via plugin/AD_Server/VMAP.php — AVideo CWE-91 6.1 Medium 2026-09-11
CVE-2026-89248 AVideo WebRTC Plugin Information Disclosure via status.json.php — AVideo CWE-200 5.3 Medium 2026-09-11
CVE-2026-89246 WWBN AVideo CSV Formula Injection via myComments.download.php — AVideo CWE-1236 5.4 Medium 2026-09-11
CVE-2026-89245 WWBN AVideo Cross-Site Request Forgery via playlistRemove.php — AVideo CWE-352 6.5 Medium 2026-09-11
CVE-2026-89244 WWBN AVideo Reflected XSS via Gallery Category getBackURL — AVideo CWE-79 6.1 Medium 2026-09-11
CVE-2026-89243 WWBN AVideo Stored XSS via UserGroups setGroup_name — AVideo CWE-79 8.1 High 2026-09-11
CVE-2026-89242 WWBN AVideo Unauthenticated SSRF via login.json.php — AVideo CWE-918 7.2 High 2026-09-11
CVE-2026-89240 WWBN AVideo Reflected XSS via confirmLivePassword.php — AVideo CWE-79 6.1 Medium 2026-09-11
CVE-2026-89241 WWBN AVideo Reflected XSS via confirmLivePassword.php — AVideo CWE-79 6.1 Medium 2026-09-11
CVE-2026-89239 WWBN AVideo Reflected XSS via Referer Header Comment Breakout — AVideo CWE-79 6.1 Medium 2026-09-11
CVE-2026-89148 AVideo Open Redirect via playlistSort.php Referer Header — AVideo CWE-352 5.4 Medium 2026-09-11

This page lists every published CVE security advisory associated with WWBN. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.