AVideo's WebSocket Token Never Expires Due to Commented-Out Timeout Validation in verifyTokenSocket()

Summary The verifyTokenSocket function in plugin/YPTSocket/functions.php has its token timeout validation commented out, causing WebSocket tokens to never expire despite being generated with a 12-hour timeout. This allows captured or legitimately obtained tokens to provide permanent WebSocket...

CVE-2026-34362

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the "verifyTokenSocket" function in "plugin/YPTSocket/functions.php" has its token timeout validation commented out, causing WebSocket tokens to never expire despite being generated with a 12-hour timeout. This...