[HIGH] AVideo: Unauthenticated Access to Payment Log DataTables Endpoints Exposes Transaction Data, PayPal Tokens, and User Financial Records

PKSA-mhr2-p9hx-xy4j CVE-2026-56341 GHSA-wprj-9cvc-5w37

Affected package: wwbn/avideo

Affected version: <=26.0

Reported by:
GitHub