[MEDIUM] AVideo: IDOR in PayPalYPT Plugin Allows Any Authenticated User to Cancel Arbitrary PayPal Subscription Agreements

PKSA-45d7-4cq7-wyg1 CVE-2026-43883 GHSA-958h-qp3x-q4gj

Affected package: wwbn/avideo

Affected version: <=29.0

Reported by:
GitHub