CVE ID :CVE-2026-56341 Published : June 20, 2026, 6:27 p.m. | 42 minutes ago Description :AVideo through version 26.0 contains multiple unauthenticated list.json.php endpoints in payment plugins lacking authorization checks, exposing PayPal tokens, Authorize.Net webhooks, and Bitcoin...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-56341 - AVideo - Unauthenticated Access to Payment Log DataTables Endpoints via list.json.php

VERWANDTEARTIKEL

CVE-2026-56345 - AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint

CVE-2026-56340 - vLLM - Denial of Service via Unvalidated Multimodal Embeddings

CVE-2026-5366 - Git Argument Injection in prefecthq/prefect

CVE-2024-58351 - Flowise - Remote Code Execution via overrideConfig Parameter

CVE-2022-50972 - WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php

CVE-2020-37255 - WordPress Time Capsule Plugin 1.21.16 Authentication Bypass