Avideo

8 CVEs across 2 Avideo products. Browse Avideo vulnerabilities, severities, and proof-of-concept exploits.

Avideo products with known CVEs

ProductCVEs
Avideo5
Avideo Platform3
Avideo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-60092Medium6.12026-07-08AVideo (Meet plugin) through commit e8d6119f3cb1b849149906efeb0a41fc024f59f8 contains a stored cross-site scripting vulnerability in the Meet plugin's getMeetI…
CVE-2026-56346Medium6.52026-06-20AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that allows unauthenticated users to decryp…
CVE-2026-56345High8.12026-06-20AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target users_id…
CVE-2026-56342Medium6.82026-06-20AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbit…
CVE-2026-56341High7.52026-06-20AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorization checks, exposing PayPal tokens…
CVE-2020-37173High7.52026-02-11AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php end…
CVE-2020-37172Medium5.32026-02-11AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mecha…
CVE-2020-37158Medium5.32026-02-11AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mecha…