FF
Product
FV Flowplayer Video Player
25
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 2High 8Medium 15Low 0
Watch
Add FV Flowplayer Video Player to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86461 | 8.8 | Oct 14 | FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter Affected: through 7.5.54.7212 |
| CVE-2024-6338 | 8.8 | Jul 19 | FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter Affected: through 7.5.46.7212 |
| CVE-2023-25066 | 8.8 | Feb 14 | Cross-Site Request Forgery (CSRF) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.30.7212 versions Affected: through 7.5.30.7212 |
| CVE-2026-118079 New | 7.2 | Oct 29 | WordPress FV Flowplayer Video Player plugin <= 8.3.4 - PHP Object Injection vulnerability Affected: through 8.3.4 |
| CVE-2026-97398 | 7.2 | Oct 14 | FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute Affected: through 7.5.54.7212 |
| CVE-2026-7556 | 7.2 | Jun 9 | FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text Affected: through 7.5.49.7212 |
| CVE-2022-25607 | 7.2 | Mar 18 | Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727) Affected: through 7.5.15.727 |
| CVE-2024-35631 | 7.1 | Jun 3 | WordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability Affected: through 7.5.45.7212 |
Showing 8