Plugin icon

FV Player 8

fv-player

Vulnerabilities:

3

Last Updated:

October 7, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-10-13
Title
FV Player 8 < 8.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute
Fixed in
Fixed in 8.1.8
CVSS
5.5 (medium)
Published
2026-10-09
Title
FV Player 8 < 8.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter
Fixed in
Fixed in 8.1.8
CVSS
8.8 (high)
Published
2026-10-06
Title
FV Player 8 < 8.1.9 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 8.1.9
CVSS
7.2 (high)