# foliovision FV Flowplayer Video Player.

Every CVE that names foliovision FV Flowplayer Video Player among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Comments](https://agentprime.io/advisories/CVE-2026-109984.md)
  `CVE-2026-109984` · CVE record: foliovision FV Flowplayer Video Player · CVSS 5.4 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Cross-site scripting (XSS)
- [FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes](https://agentprime.io/advisories/CVE-2026-110533.md)
  `CVE-2026-110533` · CVE record: foliovision FV Flowplayer Video Player · CVSS 6.4 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Cross-site scripting (XSS)
- [FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-110001.md)
  `CVE-2026-110001` · CVE record: foliovision FV Flowplayer Video Player · CVSS 5.4 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2026-118079.md)
  `CVE-2026-118079` · CVE record: FolioVision FV Flowplayer Video Player · CVSS 7.2 High · Not analysed yet · Published 29 Oct 2026 · Tags: Insecure deserialization
- [FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter](https://agentprime.io/advisories/CVE-2026-86461.md)
  `CVE-2026-86461` · CVE record: foliovision FV Flowplayer Video Player · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Unrestricted file upload
- [FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-97398.md)
  `CVE-2026-97398` · CVE record: foliovision FV Flowplayer Video Player · CVSS 7.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Cross-site scripting (XSS)
- [FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-97630.md)
  `CVE-2026-97630` · CVE record: foliovision FV Flowplayer Video Player · CVSS 6.4 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress FV Flowplayer Video Player plugin <= 7.5.54.7212 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-42695.md)
  `CVE-2026-42695` · CVE record: FolioVision FV Flowplayer Video Player · CVSS 6.5 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Cross-site scripting (XSS)
- [FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcode](https://agentprime.io/advisories/CVE-2026-12135.md)
  `CVE-2026-12135` · CVE record: foliovision FV Flowplayer Video Player · CVSS 6.4 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Cross-site scripting (XSS)
- [WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2026-49773.md)
  `CVE-2026-49773` · CVE record: FolioVision FV Flowplayer Video Player · CVSS 6.5 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Cross-site scripting (XSS)
- [FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text](https://agentprime.io/advisories/CVE-2026-7556.md)
  `CVE-2026-7556` · CVE record: foliovision FV Flowplayer Video Player · CVSS 7.2 High · Not analysed yet · Published 9 Jun 2026 · Tags: Cross-site scripting (XSS)
- [Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library](https://agentprime.io/advisories/CVE-2024-5020.md)
  `CVE-2024-5020` · CVE record: extendthemes Colibri Page Builder and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 4 Dec 2024 · Tags: Cross-site scripting (XSS)
- [FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter](https://agentprime.io/advisories/CVE-2024-6338.md)
  `CVE-2024-6338` · CVE record: foliovision FV Flowplayer Video Player · CVSS 8.8 High · Not analysed yet · Published 19 Jul 2024 · Tags: SQL injection
- [WordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-35631.md)
  `CVE-2024-35631` · CVE record: Foliovision FV Flowplayer Video Player · CVSS 7.1 High · Not analysed yet · Published 3 Jun 2024 · Tags: Cross-site scripting (XSS)
- [WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability](https://agentprime.io/advisories/CVE-2024-32078.md)
  `CVE-2024-32078` · CVE record: Foliovision FV Flowplayer Video Player · CVSS 4.1 Medium · Not analysed yet · Published 24 Apr 2024 · Tags: Open redirect
- [WordPress FV Flowplayer Video Player plugin <= 7.5.43.7212 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2024-32955.md)
  `CVE-2024-32955` · CVE record: Foliovision FV Flowplayer Video Player · CVSS 4.9 Medium · Not analysed yet · Published 24 Apr 2024 · Tags: Server-side request forgery (SSRF)
- [FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update](https://agentprime.io/advisories/CVE-2023-4520.md)
  `CVE-2023-4520` · CVE record: foliovision FV Flowplayer Video Player · CVSS 5.4 Medium · Not analysed yet · Published 25 Aug 2023 · Tags: Cross-site scripting (XSS)
- [WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)](https://agentprime.io/advisories/CVE-2023-30499.md)
  `CVE-2023-30499` · CVE record: FolioVision FV Flowplayer Video Player · CVSS 7.1 High · Not analysed yet · Published 18 Aug 2023 · Tags: Cross-site scripting (XSS)
- [WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)](https://agentprime.io/advisories/CVE-2023-25066.md)
  `CVE-2023-25066` · CVE record: FolioVision FV Flowplayer Video Player · CVSS 4.3 Medium · Not analysed yet · Published 14 Feb 2023 · Tags: Cross-site request forgery (CSRF)
- [Foliovision FV Flowplayer Video Player: Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows…](https://agentprime.io/advisories/CVE-2018-0642.md)
  `CVE-2018-0642` · CVE record: Foliovision FV Flowplayer Video Player · No CVSS score · Not analysed yet · Published 7 Sept 2018

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=foliovision-fv-flowplayer-video-player>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/foliovision-fv-flowplayer-video-player/>. Everything for agents: <https://agentprime.io/llms.txt>.