CVE-2026-34394

Packagist/wwbn/avideo CVE-2026-34394: high 8.1, EPSS 0.32%

AVideo's CSRF on Admin Plugin Configuration Enables Payment Credential Hijacking

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-4wwr-7h7c-chqr
• https://github.com/WWBN/AVideo/security/advisories/GHSA-4wwr-7h7c-chqr
• https://nvd.nist.gov/vuln/detail/CVE-2026-34394
• https://github.com/WWBN/AVideo

CVE-2026-34394 · published 2026-03-31T23:15:25Z · modified 2026-03-31T23:41:23.670848Z · JSON