CVE-2025-63952

A Cross-Site Request Forgery (CSRF) vulnerability exists in the /mwapi?method=add-user component of Magewell Pro Convert v1.2.213 (also referred to as Magewell Ultra Encode). An attacker can exploit this by sending a crafted GET request to the vulnerable API endpoint to arbitrarily create account...

PT-2025-47943

Name of the Vulnerable Software and Affected Versions Magewell Pro Convert version 1.2.213 Description A Cross-Site Request Forgery CSRF exists in the /mwapi?method=add-user component. This allows attackers to create accounts by sending a specially crafted GET request. The API endpoint...