EUVD-2026-67683

WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts...

CVE-2026-81732 WWBN AVideo through 30.0 Information Disclosure via report4.json.php

WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts...

CVE-2026-81732

WWBN AVideo through version 30.0 contains an information disclosure vulnerability caused by missing authentication on the report4.json.php and report4.1.json.php endpoints. An unauthenticated attacker can issue GET requests to retrieve daily and cumulative user-registration counts without any ses...