| CVE-2026-85347 |
FV Player < 7.5.56.7212 - Contributor+ Stored XSS via Text Lightbox Caption
|
6.8
Medium
|
Nov 5, 2026 |
| CVE-2026-85351 |
FV Player < 7.5.56.7212 - Contributor+ SSRF via Media Library Import
|
5.0
Medium
|
Nov 5, 2026 |
| CVE-2026-85346 |
FV Player < 7.5.56.7212 - Subscriber+ Cloud Storage File Disclosure via Media Browser Handlers
|
4.3
Medium
|
Nov 5, 2026 |
| CVE-2026-108068 |
FV Flowplayer Video Player 7.4.44.727 - 7.5.55.7212 - Contributor+ Bulk Video Record Disclosure and Modification via Migration Wizard
|
3.8
Low
|
Nov 4, 2026 |
| CVE-2026-108067 |
FV Flowplayer Video Player < 7.5.56.7212 - Contributor+ Arbitrary Video and Meta Record Deletion, Video Modification and Meta Disclosure via IDOR
|
3.8
Low
|
Nov 4, 2026 |
| CVE-2026-85345 |
The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before…
|
4.1
Medium
|
Oct 14, 2026 |