6.6
Medium
CVE-2022-25607 Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player…
Description
Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FV Flowplayer Video Player (WordPress plugin) 7.5 | earliest → 7.5.15.727 | No fix stated |