Foliovision vulnerabilities

Products

• Fv Flowplayer Video Player 21
• Fv Flowplayer Video Player 13
• Fv Player 8 3
• Fv Flowplayer Video Player (wordpress Plugin) 2
• Fv Simpler Seo 2

Newest

• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.56.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Content CVE-2026-121515 5.4 MediumNovember 7, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Comments CVE-2026-109984 5.4 MediumOctober 30, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-110533 6.4 MediumOctober 30, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attribute CVE-2026-110001 5.4 MediumOctober 30, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerability CVE-2026-118079 7.2 HighOctober 29, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter CVE-2026-86461 8.8 HighOctober 14, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute CVE-2026-97398 7.2 HighOctober 14, 2026
• foliovision fv player 8 FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute CVE-2026-95807 6.4 MediumOctober 14, 2026
• foliovision fv simpler seo WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-54868 6.5 MediumOctober 13, 2026
• foliovision fv player 8 WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-42699 7.1 HighOctober 10, 2026
• foliovision fv player 8 FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter CVE-2026-83526 8.8 HighOctober 10, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute CVE-2026-97630 6.4 MediumOctober 10, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more WordPress FV Flowplayer Video Player plugin <= 7.5.54.7212 - Cross Site Scripting (XSS) vulnerability CVE-2026-42695 6.5 MediumOctober 9, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcode CVE-2026-12135 6.4 MediumJuly 1, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability CVE-2026-49773 6.5 MediumJune 15, 2026
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text CVE-2026-7556 7.2 HighJune 9, 2026
• foliovision fv simpler seo WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Access Control vulnerability CVE-2025-68579 5.3 MediumDecember 24, 2025
• foliovision fv antispam WordPress FV Antispam plugin <= 2.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-66102 7.1 HighDecember 18, 2025
• foliovision foliopress wysiwyg WordPress Foliopress WYSIWYG plugin <= 2.6.18 - CSRF to Stored XSS vulnerability CVE-2025-32610 7.1 HighApril 9, 2025
• foliovision filled in WordPress Filled In Plugin <= 1.9.2 - CSRF to Stored XSS vulnerability CVE-2025-22628 7.1 HighMarch 27, 2025
• foliovision fv thoughtful comments WordPress FV Thoughtful Comments plugin <= 0.3.5 - Broken Access Control vulnerability CVE-2025-24613 4.3 MediumJanuary 24, 2025
• foliovision fv descriptions WordPress FV Descriptions plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-56032 7.1 HighJanuary 2, 2025
• 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 more Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library CVE-2024-5020 6.4 MediumDecember 4, 2024
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter CVE-2024-6338 8.8 HighJuly 19, 2024
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more WordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability CVE-2024-35631 7.1 HighJune 3, 2024
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability CVE-2024-32078 4.1 MediumApril 24, 2024
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more WordPress FV Flowplayer Video Player plugin <= 7.5.43.7212 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-32955 4.9 MediumApril 24, 2024
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update CVE-2023-4520 5.4 MediumAugust 25, 2023
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS) CVE-2023-30499 7.1 HighAugust 18, 2023
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25066 4.3 MediumFebruary 14, 2023
• foliovision fv flowplayer video player (wordpress plugin), fv flowplayer video player +1 more WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability CVE-2022-25613 4.1 MediumApril 4, 2022
• foliovision fv flowplayer video player, fv flowplayer video player (wordpress plugin) +1 more WordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability CVE-2022-25607 6.6 MediumMarch 18, 2022
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more FV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting CVE-2021-39350 6.1 MediumOctober 6, 2021
• foliovision fv flowplayer video player Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video... CVE-2020-35748 5.4 MediumJanuary 15, 2021
• foliovision fv flowplayer video player The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the... CVE-2019-14800 5.3 MediumAugust 15, 2019
• foliovision fv flowplayer video player The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription... CVE-2019-14801 9.8 CriticalAugust 9, 2019
• foliovision fv flowplayer video player The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS. CVE-2019-14799 6.1 MediumAugust 9, 2019
• foliovision fv flowplayer video player A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before... CVE-2019-13573 9.8 CriticalJuly 17, 2019
• foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 more Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote... CVE-2018-0642 6.1 MediumSeptember 7, 2018
• foliovision foliopress wysiwyg Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for... CVE-2014-1232 4.3 MediumJanuary 8, 2014
• foliovision fv wordpress flowplayer plugin Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin... CVE-2011-4568 4.3 MediumNovember 29, 2011