FV Player 8 vulnerabilities | LiveThreat CVE Feed

Product

FV Player 8

by foliovision · last CVE Oct 14, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 1Low 0

Severity

Exploitation

Watch

Add FV Player 8 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-83526	8.8	1%	Oct 10	FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter Affected: through 8.1.7
CVE-2026-42699	7.1	0%	Oct 10	WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability Affected: through 8.1.8
CVE-2026-95807	6.4	0%	Oct 14	FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute Affected: through 8.1.7