Login Request a demo
FO
Vendor
foliovision
9 products with CVEs on record
37
CVEs
0
On KEV
9
New 30D
Products
FF
FV Flowplayer Video Player
foliovision
9.8
25 CVEs0 on KEV5 new
FP
FV Player 8
foliovision
8.8
3 CVEs0 on KEV3 new
FS
FV Simpler SEO
FolioVision
6.5
2 CVEs0 on KEV1 new
FW
Foliopress WYSIWYG
FolioVision
7.1
2 CVEs0 on KEV0 new
FI
Filled In
FolioVision
7.1
1 CVEs0 on KEV0 new
FA
FV Antispam
FolioVision
7.1
1 CVEs0 on KEV0 new
FD
FV Descriptions
FolioVision
7.1
1 CVEs0 on KEV0 new
FT
FV Thoughtful Comments
FolioVision
4.3
1 CVEs0 on KEV0 new
FW
FV Wordpress Flowplayer Plugin
Foliovision
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-118079
New
FF
FV Flowplayer Video Player
FolioVision
7.2–Oct 29WordPress FV Flowplayer Video Player plugin <= 8.3.4 - PHP Object Injection vulnerability
CVE-2026-86461
FF
FV Flowplayer Video Player
foliovision
8.8
1%
Oct 14FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter
CVE-2026-97398
FF
FV Flowplayer Video Player
foliovision
7.2
0%
Oct 14FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute
CVE-2026-95807
FP
FV Player 8
foliovision
6.4
0%
Oct 14FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute
CVE-2026-54868
FS
FV Simpler SEO
FolioVision
6.5
0%
Oct 13WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42699
FP
FV Player 8
FolioVision
7.1
0%
Oct 10WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-83526
FP
FV Player 8
foliovision
8.8
1%
Oct 10FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter
CVE-2026-97630
FF
FV Flowplayer Video Player
foliovision
6.4
0%
Oct 10FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute
CVE-2026-42695
FF
FV Flowplayer Video Player
FolioVision
6.5
0%
Oct 9WordPress FV Flowplayer Video Player plugin <= 7.5.54.7212 - Cross Site Scripting (XSS) vulnerability
CVE-2026-12135
FF
FV Flowplayer Video Player
foliovision
6.4
0%
Jul 1FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcode
CVE-2026-49773
FF
FV Flowplayer Video Player
FolioVision
6.5
0%
Jun 15WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability
CVE-2026-7556
FF
FV Flowplayer Video Player
foliovision
7.2
0%
Jun 9FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text
CVE-2025-68579
FS
FV Simpler SEO
FolioVision
5.3
0%
Dec 24WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Access Control vulnerability
CVE-2025-66102
FA
FV Antispam
FolioVision
7.1
0%
Dec 18WordPress FV Antispam plugin <= 2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32610
FW
Foliopress WYSIWYG
FolioVision
7.1
0%
Apr 9WordPress Foliopress WYSIWYG plugin <= 2.6.18 - CSRF to Stored XSS vulnerability
CVE-2025-22628
FI
Filled In
FolioVision
7.1
0%
Mar 27WordPress Filled In Plugin <= 1.9.2 - CSRF to Stored XSS vulnerability
CVE-2025-24613
FT
FV Thoughtful Comments
FolioVision
4.3
0%
Jan 24WordPress FV Thoughtful Comments plugin <= 0.3.5 - Broken Access Control vulnerability
CVE-2024-56032
FD
FV Descriptions
FolioVision
7.1
0%
Jan 2WordPress FV Descriptions plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-5020
FF
FV Flowplayer Video Player
foliovision
6.4
0%
Dec 4Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
CVE-2024-6338
FF
FV Flowplayer Video Player
foliovision
8.8
1%
Jul 19FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter
CVE-2024-35631
FF
FV Flowplayer Video Player
Foliovision
7.1
0%
Jun 3WordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability
CVE-2024-32078
FF
FV Flowplayer Video Player
Foliovision
4.1
0%
Apr 24WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability
CVE-2024-32955
FF
FV Flowplayer Video Player
Foliovision
4.9
0%
Apr 24WordPress FV Flowplayer Video Player plugin <= 7.5.43.7212 - Server Side Request Forgery (SSRF) vulnerability
CVE-2023-4520
FF
FV Flowplayer Video Player
foliovision
6.1
1%
Aug 25FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update
CVE-2023-30499
FF
FV Flowplayer Video Player
FolioVision
6.1
0%
Aug 18WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-25066
FF
FV Flowplayer Video Player
Foliovision
8.8
0%
Feb 14Cross-Site Request Forgery (CSRF) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.30.7212 versions
CVE-2022-25613
FF
FV Flowplayer Video Player
Foliovision
5.4
1%
Apr 4Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in FV Flowplayer Video Player (WordPress plugin) versions <= 7.5.18.727 via &fv_wp_flowplayer_field_splash…
CVE-2022-25607
FF
FV Flowplayer Video Player
Foliovision
7.2
1%
Mar 18Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727)
CVE-2021-39350
FF
FV Flowplayer Video Player
Foliovision
6.1
2%
Oct 6The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows…
CVE-2020-35748
FF
FV Flowplayer Video Player
Foliovision
5.4
1%
Jan 15Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to…
CVE-2019-14800
FF
FV Flowplayer Video Player
Foliovision
5.3
2%
Aug 15The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via the…
CVE-2019-14801
FF
FV Flowplayer Video Player
Foliovision
9.8
2%
Aug 9The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection
CVE-2019-14799
FF
FV Flowplayer Video Player
Foliovision
6.1
2%
Aug 9The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS
CVE-2019-13573
FF
FV Flowplayer Video Player
Foliovision
9.8
4%
Jul 17A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress
CVE-2018-0642
FF
FV Flowplayer Video Player
Foliovision
6.1
1%
Sep 7Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
CVE-2014-1232
FW
Foliopress Wysiwyg
Foliovision
–
2%
Jan 8Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via…
CVE-2011-4568
FW
FV Wordpress Flowplayer Plugin
Foliovision
–
2%
Nov 29Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or…