Security
فارسی
All products

fv-wordpress-flowplayer

WordPress · Plugin
39 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
FV Flowplayer Video Player <= 7.5.56.7212 - Unauthenticated Stored Cross-Site Scripting via Comment ContentCVE-2026-121515 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player < 7.5.56.7212 - Authenticated (Contributor+) Insecure Direct Object ReferenceCVE-2026-108067 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player 7.4.44.727 - 7.5.56.7211 - Missing AuthorizationCVE-2026-108068 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player <= 7.5.56.7212 - Authenticated (Shop Manager+) PHP Object InjectionCVE-2026-118079 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in CommentsCVE-2026-109984 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode AttributesCVE-2026-110533 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode AttributeCVE-2026-110001 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player 7.5.44.7212 - 7.5.55.7211 - Authenticated (Contributor+) Server-Side Request ForgeryCVE-2026-85345 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' ParameterCVE-2026-86461 fv-wordpress-flowplayer WordPress High Fix reported
FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode AttributeCVE-2026-97398 fv-wordpress-flowplayer WordPress High Fix reported
FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode AttributeCVE-2026-97630 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-42695 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' ShortcodeCVE-2026-12135 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment TextCVE-2026-7556 fv-wordpress-flowplayer WordPress High Fix reported
FV Flowplayer Video Player < 7.5.51.7212 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-49773 fv-wordpress-flowplayer WordPress Medium Fix reported
Thumbnail Slider With Lightbox <= 1.0.21 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2024-5020 accordion-slidercolibri-page-builder WordPress Medium Fix reported
FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude ParameterCVE-2024-6338 fv-wordpress-flowplayer WordPress High Fix reported
FV Flowplayer Video Player <= 7.5.45.7212 - Reflected Cross-Site ScriptingCVE-2024-35631 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player <= 7.5.43.7212 - Authenticated (Subscriber+) Server-side Request ForgeryCVE-2024-32955 fv-wordpress-flowplayer WordPress Medium Fix reported
FV Flowplayer Video Player <= 7.5.44.7212 - Authenticated (Contributor+) Arbitrary RedirectCVE-2024-32078 fv-wordpress-flowplayer WordPress Medium Fix reported