CVE-2026-33507 | WWBN AVideo up to 26.0 ZIP File Parser pluginImport.json.php cross-site request forgery (GHSA-hv36-p4w4-6vmj)

March 23, 2026 Yanac

A vulnerability classified as problematic was found in WWBN AVideo up to 26.0. This impacts an unknown function of the file objects/pluginImport.json.php of the component ZIP File Parser. The manipulation results in cross-site request forgery.

This vulnerability was named CVE-2026-33507. The attack may be performed from remote. There is no available exploit.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More