Avideo
3 CVEs across 2 Avideo products. Browse Avideo vulnerabilities, severities, and proof-of-concept exploits.
Avideo products with known CVEs
Avideo CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-60092 | Medium | 6.1 | 2026-07-08 | AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vulnerability in the Meet plugin's getMeetI… |
CVE-2026-56346 | Medium | 6.5 | 2026-06-20 | AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that allows unauthenticated users to decryp… |
CVE-2026-56345 | High | 8.1 | 2026-06-20 | AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target users_id… |
CVE-2026-56342 | Medium | 6.8 | 2026-06-20 | AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbit… |
CVE-2026-56341 | High | 7.5 | 2026-06-20 | AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorization checks, exposing PayPal tokens… |
CVE-2020-37173 | High | 7.5 | 2026-02-11 | AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php end… |
CVE-2020-37172 | Medium | 5.3 | 2026-02-11 | AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mecha… |
CVE-2020-37158 | Medium | 5.3 | 2026-02-11 | AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mecha… |