CVE-2026-123486 | WWBN AVideo up to 29.4.0 PayPalYPT Plugin plugin/PayPalYPT/ipn.php isRecurringPaymentIdUsed race condition

A vulnerability described as problematic has been identified in WWBN AVideo up to 29.4.0. This vulnerability affects the function isRecurringPaymentIdUsed of the file plugin/PayPalYPT/ipn.php of the component PayPalYPT Plugin. The manipulation results in race condition.

This vulnerability is known as CVE-2026-123486. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More