İçeriğe atla
Noroxi

FV Flowplayer Video Player

fv-wordpress-flowplayer · eklenti

FV Flowplayer Video Player için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

21 bilinen açık

2 kritik · 1 kayıt için istismar kodu yayımlanmış · son kayıt 1 Tem 2026

Güvenlik açıkları

  • CVE-2019-14801

    The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection.

    Kritik 9.8

  • CVE-2019-13573

    A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress.

    Kritik 9.8

  • CVE-2024-6338

    FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter

    Yüksek 8.8

  • CVE-2023-25066

    WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)

    Yüksek 8.8

  • CVE-2026-7556

    FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text

    Yüksek 7.2

  • CVE-2022-25607

    WordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability

    Yüksek 7.2

  • CVE-2024-35631

    WordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability

    Yüksek 7.1

  • CVE-2024-22299

    WordPress FV Player plugin <= 7.5.41.7212 - Reflected Cross Site Scripting (XSS) vulnerability

    Yüksek 7.1

  • CVE-2026-49773→ 7.5.51.7212

    WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2024-29122

    WordPress FV Player plugin <= 7.5.41.7212 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2026-12135

    FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcode

    Orta 6.4

  • CVE-2023-4520

    FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update

    Orta 6.1

  • CVE-2023-30499

    WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)

    Orta 6.1

  • CVE-2021-39350

    FV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting

    Orta 6.1

  • CVE-2019-14799

    The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.

    Orta 6.1

  • CVE-2018-0642

    Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HT

    Orta 6.1

  • CVE-2022-25613

    WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

    Orta 5.4

  • CVE-2019-14800

    The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via

    Orta 5.3

  • CVE-2024-32955

    WordPress FV Flowplayer Video Player plugin <= 7.5.43.7212 - Server Side Request Forgery (SSRF) vulnerability

    Orta 4.9

  • CVE-2011-4568

    Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attack

    Orta 4.3

  • CVE-2024-32078

    WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability

    Orta 4.1

← Dizine dön