| CVE-2026-109984 |
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment'…
|
5.4
Moyenne
|
30 oct. 2026 |
| CVE-2026-110533 |
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
6.4
Moyenne
|
30 oct. 2026 |
| CVE-2026-110001 |
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment…
|
5.4
Moyenne
|
30 oct. 2026 |
| CVE-2026-118079 |
Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows…
|
7.2
Élevée
|
29 oct. 2026 |
| CVE-2026-86461 |
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up…
|
8.8
Élevée
|
14 oct. 2026 |
| CVE-2026-97398 |
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis'…
|
7.2
Élevée
|
14 oct. 2026 |
| CVE-2026-97630 |
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup…
|
6.4
Moyenne
|
10 oct. 2026 |
| CVE-2026-42695 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV…
|
6.5
Moyenne
|
9 oct. 2026 |
| CVE-2026-12135 |
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
6.4
Moyenne
|
1 juil. 2026 |
| CVE-2026-49773 |
Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions
|
6.5
Moyenne
|
15 juin 2026 |
| CVE-2026-7556 |
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment text in…
|
7.2
Élevée
|
9 juin 2026 |
| CVE-2024-5020 |
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox…
|
6.4
Moyenne
|
4 déc. 2024 |
| CVE-2024-6338 |
The FV Flowplayer Video Player plugin for WordPress is vulnerable to time-based SQL Injection via the ‘exclude’…
|
8.8
Élevée
|
19 juil. 2024 |
| CVE-2024-35631 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Foliovision…
|
7.1
Élevée
|
3 juin 2024 |
| CVE-2024-32078 |
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Foliovision FV Flowplayer Video Player.This issue…
|
4.1
Moyenne
|
24 avr. 2024 |
| CVE-2024-32955 |
Server-Side Request Forgery (SSRF) vulnerability in Foliovision FV Flowplayer Video Player.This issue affects FV…
|
4.9
Moyenne
|
24 avr. 2024 |
| CVE-2023-4520 |
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
5.4
Moyenne
|
25 août 2023 |
| CVE-2023-30499 |
Unauth
|
7.1
Élevée
|
18 août 2023 |
| CVE-2023-25066 |
Cross-Site Request Forgery (CSRF) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.30.7212 versions
|
4.3
Moyenne
|
14 févr. 2023 |
| CVE-2018-0642 |
Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject…
|
Non notée
|
7 sept. 2018 |