Log in Start free

FolioVision

Products

ProductCVEsExploitedLatest
FV Flowplayer Video Player20–Nov 7, 2026
FV Player 83–Oct 14, 2026
FV Flowplayer Video Player (WordPress plugin)2–Apr 4, 2022
FV Simpler SEO2–Oct 13, 2026
Filled In1–Mar 27, 2025
FV Thoughtful Comments1–Jan 24, 2025
Foliopress WYSIWYG1–Apr 9, 2025
FV Antispam1–Dec 18, 2025
FV Descriptions1–Jan 2, 2025

Exploited and recent CVEs

  • CVE-2026-121515 Medium 5.4 FV Flowplayer Video Player <= 7.5.56.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Content –
  • CVE-2026-109984 Medium 5.4 FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Comments 0.4%
  • CVE-2026-110533 Medium 6.4 FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
  • CVE-2026-110001 Medium 5.4 FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attribute 0.3%
  • CVE-2026-118079 High 7.2 WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-86461 High 8.8 FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter 0.7%
  • CVE-2026-97398 High 7.2 FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute 0.3%
  • CVE-2026-95807 Medium 6.4 FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute 0.2%
  • CVE-2026-54868 Medium 6.5 WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-42699 High 7.1 WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-83526 High 8.8 FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter 0.6%
  • CVE-2026-97630 Medium 6.4 FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute 0.2%
  • CVE-2026-42695 Medium 6.5 WordPress FV Flowplayer Video Player plugin <= 7.5.54.7212 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-12135 Medium 6.4 FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcode 0.3%
  • CVE-2026-49773 Medium 6.5 WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-7556 High 7.2 FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text 0.2%
  • CVE-2025-68579 Medium 5.3 WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Access Control vulnerability 0.3%
  • CVE-2025-66102 High 7.1 WordPress FV Antispam plugin <= 2.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-32610 High 7.1 WordPress Foliopress WYSIWYG plugin <= 2.6.18 - CSRF to Stored XSS vulnerability 0.2%
  • CVE-2025-22628 High 7.1 WordPress Filled In Plugin <= 1.9.2 - CSRF to Stored XSS vulnerability 0.2%
  • CVE-2025-24613 Medium 4.3 WordPress FV Thoughtful Comments plugin <= 0.3.5 - Broken Access Control vulnerability 0.4%
  • CVE-2024-56032 High 7.1 WordPress FV Descriptions plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-5020 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library 0.4%
  • CVE-2024-6338 High 8.8 FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter 0.5%
  • CVE-2024-35631 High 7.1 WordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-32078 Medium 4.1 WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability 0.3%
  • CVE-2024-32955 Medium 4.9 WordPress FV Flowplayer Video Player plugin <= 7.5.43.7212 - Server Side Request Forgery (SSRF) vulnerability 0.3%
  • CVE-2023-4520 Medium 5.4 FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update 0.6%
  • CVE-2023-30499 High 7.1 WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-25066 Medium 4.3 WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%