FV Flowplayer Video Player

Уязвимости

• CVE-2019-14801без авторизации

  The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection.

  Критич. 9.8

• CVE-2019-13573без авторизации

  A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress.

  Критич. 9.8

• CVE-2023-25066без авторизации · нужен клик≤ 7.5.30.7212

  WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2024-6338подписчик+≤ 7.5.46.7212

  FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter

  Высокий 8.8

• CVE-2026-7556без авторизации≤ 7.5.49.7212

  FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text

  Высокий 7.2

• CVE-2022-25607автор+≤ 7.5.15.727

  WordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability

  Высокий 7.2

• CVE-2024-35631без авторизации · нужен клик≤ 7.5.45.7212

  WordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2024-22299без авторизации · нужен клик≤ 7.5.41.7212

  WordPress FV Player plugin <= 7.5.41.7212 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-49773подписчик+→ 7.5.51.7212

  WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2024-29122нужен вход≤ 7.5.41.7212

  WordPress FV Player plugin <= 7.5.41.7212 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-12135участник+≤ 7.5.51.7212

  FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcode

  Средний 6.4

• CVE-2023-4520без авторизации≤ 7.5.37.7212

  FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update

  Средний 6.1

• CVE-2023-30499без авторизации · нужен клик≤ 7.5.32.7212

  WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2021-39350без авторизации · нужен клик

  FV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2019-14799без авторизации · нужен клик

  The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.

  Средний 6.1

• CVE-2018-0642без авторизации · нужен клик

  Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HT

  Средний 6.1

• CVE-2022-25613нужен вход≤ 7.5.18.727

  WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2019-14800без авторизации

  The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via

  Средний 5.3

• CVE-2024-32955нужен вход≤ 7.5.43.7212

  WordPress FV Flowplayer Video Player plugin <= 7.5.43.7212 - Server Side Request Forgery (SSRF) vulnerability

  Средний 4.9

• CVE-2011-4568

  Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attack

  Средний 4.3

• CVE-2024-32078нужен вход≤ 7.5.44.7212

  WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability

  Средний 4.1