WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fv-wordpress-flowplayer
Published
2024-03-16
Title
FV Flowplayer Video Player < 7.5.44.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fv-wordpress-flowplayer
Published
2024-03-26
Title
FV Flowplayer Video Player < 7.5.44.7212 - Reflected Cross-Site Scripting
Slug
fv-wordpress-flowplayer
Published
2024-04-11
Title
FV Flowplayer Video Player < 7.5.45.7212 - Authenticated (Contributor+) Arbitrary Redirect
Slug
fv-wordpress-flowplayer
Published
2024-04-22
Title
FV Flowplayer Video Player < 7.5.45.7212 - Authenticated (Subscriber+) Server-side Request Forgery
Slug
fv-wordpress-flowplayer
Published
2024-05-27
Title
FV Flowplayer Video Player < 7.5.46.7212 - Reflected Cross-Site Scripting
Slug
fv-wordpress-flowplayer
Published
2024-07-18
Title
FV Player < 7.5.47.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter
Slug
fv-wordpress-flowplayer
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Slug
fv-wordpress-flowplayer
Published
2026-06-08
Title
FV Flowplayer Video Player < 7.5.50.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text
Slug
fv-wordpress-flowplayer
Published
2026-06-04
Title
FV Flowplayer Video Player < 7.5.51.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
fv-wordpress-flowplayer
Published
2026-06-30
Title
FV Flowplayer Video Player < 7.5.52.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcode
Slug
fv-wordpress-flowplayer
Published
2026-10-06
Title
FV Flowplayer Video Player < 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
fv-wordpress-flowplayer
Published
2026-10-09
Title
FV Flowplayer Video Player < 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute
Slug
fv-wordpress-flowplayer
Published
2026-10-12
Title
FV Player 7.5.44.7212 - 7.5.54.7212 - Contributor+ SSRF via retrieve_video_data
Slug
fv-wordpress-flowplayer
Published
2026-10-13
Title
FV Flowplayer Video Player < 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute
Slug
fv-wordpress-flowplayer
Published
2026-10-14
Title
FV Flowplayer Video Player < 7.5.55.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter
Slug
fv-wordpress-flowplayer
Published
2026-10-30
Title
FV Flowplayer Video Player < 7.5.56.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attribute
Slug
fv-wordpress-flowplayer
Published
2026-10-30
Title
FV Flowplayer Video Player < 7.5.56.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
fv-wordpress-flowplayer
Published
2026-10-30
Title
FV Flowplayer Video Player < 7.5.56.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Comments
Slug
fv-wordpress-flowplayer
Published
2026-10-28
Title
FV Flowplayer Video Player < 7.5.57.7212 - Authenticated (Shop Manager+) PHP Object Injection
Slug
fw-anker
Published
2025-09-05
Title
FW Anker <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
fw-food-menu
Published
2025-06-12
Title
FW Food Menu <= 6.0.0 - Unauthenticated Arbitrary File Upload
Slug
fw-food-menu
Published
2025-06-24
Title
FW Food Menu <= 6.0.0 - Unauthenticated Arbitrary File Deletion
Slug
fw-gallery
Published
2025-06-10
Title
FW Gallery <= 8.0.0 - Unauthenticated Arbitrary File Deletion
Slug
fw-gallery
Published
2025-06-25
Title
FW Gallery <= 8.0.0 - Unauthenticated Local File Inclusion
Slug
fw-gallery
Published
2025-06-30
Title
FW Gallery <= 8.0.0 - Unauthenticated Arbitrary File Upload