Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: FV Flowplayer Video Player 7.5.56.7212 Clear all filters
TI-2026-84950 CVE-2026-108068 · GHSA-7p26-8g5q-c3vw

Missing authorization in FV Flowplayer Video Player plugin

Priority LOW 17

The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform proper authorization checks on one of its video-migration functions, which is protected by a nonce only, allowing users with Contributor…

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00186 Published 2026-11-04 Fixed in 7.5.56.7212 CWE-862
TI-2026-84949 CVE-2026-108067 · GHSA-cwrh-6w94-5384

Broken access control in FV Flowplayer Video Player exposes records

Priority LOW 17

The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not properly verify record ownership before modifying or deleting stored video and meta records, allowing authenticated users with Contributor-level…

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00186 Published 2026-11-04 Fixed in 7.5.56.7212 CWE-639