WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fv-wordpress-flowplayer
Published
2022-03-18
Title
FV Flowplayer Video Player < 7.5.18.727 - Author+ SQLi
Slug
fv-wordpress-flowplayer
Published
2022-03-24
Title
FV Flowplayer Video Player < 7.5.19.727 - Contributor+ Stored Cross-Site Scripting
Slug
fv-wordpress-flowplayer
Published
2023-02-14
Title
FV Flowplayer Video Player < 7.5.31.7212 - Settings Toggle via CSRF
Slug
fv-wordpress-flowplayer
Published
2023-05-03
Title
FV Flowplayer Video Player < 7.5.35.7212 - Reflected XSS
Slug
fv-wordpress-flowplayer
Published
2023-08-24
Title
FV Flowplayer Video Player < 7.5.39.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update
Slug
fv-wordpress-flowplayer
Published
2024-03-16
Title
FV Flowplayer Video Player < 7.5.44.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fv-wordpress-flowplayer
Published
2024-03-26
Title
FV Flowplayer Video Player < 7.5.44.7212 - Reflected Cross-Site Scripting
Slug
fv-wordpress-flowplayer
Published
2024-04-11
Title
FV Flowplayer Video Player < 7.5.45.7212 - Authenticated (Contributor+) Arbitrary Redirect
Slug
fv-wordpress-flowplayer
Published
2024-04-22
Title
FV Flowplayer Video Player < 7.5.45.7212 - Authenticated (Subscriber+) Server-side Request Forgery
Slug
fv-wordpress-flowplayer
Published
2024-05-27
Title
FV Flowplayer Video Player < 7.5.46.7212 - Reflected Cross-Site Scripting
Slug
fv-wordpress-flowplayer
Published
2024-07-18
Title
FV Player < 7.5.47.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter
Slug
fv-wordpress-flowplayer
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Slug
fw-anker
Published
2025-09-05
Title
FW Anker <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fw-food-menu
Published
2025-06-12
Title
FW Food Menu <= 6.0.0 - Unauthenticated Arbitrary File Upload
Slug
fw-food-menu
Published
2025-06-24
Title
FW Food Menu <= 6.0.0 - Unauthenticated Arbitrary File Deletion
Slug
fw-gallery
Published
2025-06-10
Title
FW Gallery <= 8.0.0 - Unauthenticated Arbitrary File Deletion
Slug
fw-gallery
Published
2025-06-25
Title
FW Gallery <= 8.0.0 - Unauthenticated Local File Inclusion
Slug
fw-gallery
Published
2025-06-30
Title
FW Gallery <= 8.0.0 - Unauthenticated Arbitrary File Upload
Slug
fw-integration-for-emailoctopus
Published
2025-01-03
Title
EO4WP < 1.0.8.2 - Contributor+ Stored XSS
Slug
fw-integration-for-emailoctopus
Published
2025-03-27
Title
EO4WP < 1.0.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fwd-slider
Published
2025-01-16
Title
FWD Slider <= 1.0 - Reflected Cross-Site Scripting
Slug
fwdmsp
Published
2024-11-22
Title
MP3 Sticky Player < 8.0 - Unauthenticated Arbitrary File Read/Download
Slug
fwduvp
Published
2025-03-06
Title
Ultimate Video Player < 10.1 - Unauthenticated Arbitrary File Download
Slug
fwduvp
Published
2025-08-15
Title
Ultimate Video Player <= 10.1 - Missing Authorization
Slug
fwduvp
Published
2025-07-10
Title
Ultimate Video Player WordPress & WooCommerce Plugin <= 10.1 - Unauthenticated Server-Side Request Forgery