How many CVEs does WWBN have?

WWBN has 354 published CVE records since 2019, including 304 in the last two years.

How many WWBN CVEs are in CISA KEV?

None of WWBN's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which WWBN products have the most CVEs?

The WWBN products with the most published CVEs are AVideo, wwbn/avideo, AVideo-Encoder.

What are the most common weakness types in WWBN CVEs?

WWBN's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-862 (Missing Authorization), CWE-918 (Server-Side Request Forgery (SSRF)).

Are there public exploits for WWBN vulnerabilities?

Yes — 289 of WWBN's CVEs have a known public exploit.

How many critical WWBN vulnerabilities are there?

WWBN has 57 critical and 132 high-severity CVEs.

What is the average severity of WWBN CVEs?

The average CVSS base score across WWBN's scored CVEs is 7.2.

RadicalNotion.AI

Log in Create an account

354 CVEs

WWBN Vulnerabilities

Name: WWBN vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WWBN.

354

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

289

Public exploits

PoC or exploit code

7.2

Avg CVSS

2019–2026

Overview

WWBN has 354 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 289 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

Security scorecard

A quick read on WWBN's vulnerability posture, as a share of its 354 published CVEs.

Average CVSS: 7.2
Critical / high: 53%
Actively exploited (KEV): 0%
Public exploit available: 82%
Patch available: 53%

Severity and exploitation

How the CVSS severity of WWBN's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical57

High132

Medium163

Low2

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WWBN's CVEs are currently listed in CISA's KEV catalog.

Public exploits

289

289 of WWBN's CVEs have a known public exploit available.

Most affected products

The WWBN products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in WWBN CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish WWBN CVE records.

Disclosure activity by year

How many WWBN CVEs were published each year.

2019

2

2020

2

2021

1

2022

24

2023

5

2024

16

2025

17

2026

287

Latest WWBN CVEs

The most recently disclosed vulnerabilities affecting WWBN.

WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title
CWE-79
Critical · CVSS 9.3
EPSS 0.2%2026-10-04
WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates
CWE-79
Critical · CVSS 9.3
EPSS 0.2%2026-10-04
AVideo before 29.1.0 Stored XSS via HTML Entity Bypass in trailer1 Field
CWE-79
Medium · CVSS 5.1
EPSS 0.2%2026-09-26
WWBN AVideo userVerifyEmail.php Unauthenticated Access Control
CWE-770
Medium · CVSS 6.9
EPSS 0.4%2026-09-17
AVideo LoginControl PGP Second Factor Authentication Bypass
CWE-287
High · CVSS 8.6
EPSS 0.5%2026-09-17
AVideo Weak PRNG Activation Code Authentication Bypass
CWE-330
Critical · CVSS 9.1
EPSS 0.5%2026-09-17
AVideo Cryptographically Weak PRNG via uniqid Stream Key
CWE-330
High · CVSS 8.3
EPSS 0.3%2026-09-17
AVideo through 29.0 Missing Authorization via comment API endpoint
CWE-862
Medium · CVSS 5.3
EPSS 0.3%2026-09-16
AVideo through 29.0 Missing Authorization Check via API Like Endpoint
CWE-862
Medium · CVSS 5.3
EPSS 0.3%2026-09-16
AVideo through 29.0 Stored Cross-Site Scripting via User-Agent Header
CWE-79
Medium · CVSS 5.3
EPSS 0.3%2026-09-16
AVideo through 29.0 Rate Limit Bypass via Non-Atomic Counter Increment
CWE-307
Medium · CVSS 6.9
EPSS 0.3%2026-09-16
AVideo through 29.0 Broken Access Control via videoAddNew.json.php CSRF Bypass
CWE-352
High · CVSS 7.1
EPSS 0.2%2026-09-16

Get an alert for each new WWBN CVE, with AI-written analysis and remediation steps.

Monitor WWBN CVEs

Other vendors

CVE counts for other vendors.

Asus369 CVEs Python351 CVEs OpenStack347 CVEs sourceware345 CVEs SolarWinds343 CVEs MongoDB342 CVEs Liferay341 CVEs Zyxel339 CVEs

Browse all vendors

Frequently asked questions

Common questions about WWBN vulnerabilities.

How many CVEs does WWBN have?: WWBN has 354 published CVE records since 2019, including 304 in the last two years.
How many WWBN CVEs are in CISA KEV?: None of WWBN's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which WWBN products have the most CVEs?: The WWBN products with the most published CVEs are AVideo, wwbn/avideo, AVideo-Encoder.
What are the most common weakness types in WWBN CVEs?: WWBN's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-862 (Missing Authorization), CWE-918 (Server-Side Request Forgery (SSRF)).
Are there public exploits for WWBN vulnerabilities?: Yes — 289 of WWBN's CVEs have a known public exploit.
How many critical WWBN vulnerabilities are there?: WWBN has 57 critical and 132 high-severity CVEs.
What is the average severity of WWBN CVEs?: The average CVSS base score across WWBN's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WWBN vulnerabilities

Get an alert for each new WWBN CVE, with AI-written analysis and remediation steps.

Create an account See pricing