Skip to content
Noroxi

FolioVision records

15 published records for vendor foliovision.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
13.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2019-13573
    40Plan

    A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress.

    CriticalCVSS 9.8No exploitEPSS 4%

    foliovision · fv flowplayer video playerJul 17, 2019

  • CVE-2019-14801
    40Plan

    The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection.

    CriticalCVSS 9.8No exploitEPSS 2%

    foliovision · fv flowplayer video playerAug 9, 2019

  • CVE-2024-6338
    35Monitor

    FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter

    HighCVSS 8.8No exploitEPSS 1%

    foliovision · fv flowplayer video playerJul 19, 2024

  • CVE-2023-25066
    35Monitor

    WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    foliovision · fv flowplayer video playerFeb 14, 2023

  • CVE-2022-25607
    28Monitor

    WordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    foliovision · fv flowplayer video playerMar 18, 2022

  • CVE-2021-39350
    25Monitor

    FV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 2%

    foliovision · fv flowplayer video playerOct 6, 2021

  • CVE-2019-14799
    25Monitor

    The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.

    MediumCVSS 6.1No exploitEPSS 2%

    foliovision · fv flowplayer video playerAug 9, 2019

  • CVE-2018-0642
    24Monitor

    Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HT

    MediumCVSS 6.1No exploitEPSS 1%

    foliovision · fv flowplayer video playerSep 7, 2018

  • CVE-2023-4520
    24Monitor

    FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update

    MediumCVSS 6.1No exploitEPSS 1%

    foliovision · fv flowplayer video playerAug 24, 2023

  • CVE-2023-30499
    24Monitor

    WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    foliovision · fv flowplayer video playerAug 18, 2023

  • CVE-2019-14800
    21Monitor

    The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via

    MediumCVSS 5.3No exploitEPSS 2%

    foliovision · fv flowplayer video playerAug 15, 2019

  • CVE-2020-35748
    21Monitor

    Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress a

    MediumCVSS 5.4No exploitEPSS 1%

    foliovision · fv flowplayer video playerJan 15, 2021

  • CVE-2022-25613
    21Monitor

    WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 1%

    foliovision · fv flowplayer video playerApr 4, 2022

  • CVE-2014-1232
    18Monitor

    Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arb

    MediumCVSS 4.3No exploitEPSS 2%

    wordpress · wordpressJan 8, 2014

  • CVE-2011-4568
    18Monitor

    Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attack

    MediumCVSS 4.3No exploitEPSS 2%

    wordpress · wordpressNov 29, 2011