CVE-2026-117525UnratedFV Player < 7.5.57.7212 - Unauthenticated Stored XSS via Comment Popup–
CVE-2026-85351UnratedFV Player < 7.5.56.7212 - Contributor+ SSRF via Media Library Import0.1%
CVE-2026-85347UnratedFV Player < 7.5.56.7212 - Contributor+ Stored XSS via Text Lightbox Caption0.2%
CVE-2026-85346UnratedFV Player < 7.5.56.7212 - Subscriber+ Cloud Storage File Disclosure via Media Browser Handlers<0.1%
CVE-2026-108068Low 3.8FV Flowplayer Video Player 7.4.44.727 - 7.5.55.7212 - Contributor+ Bulk Video Record Disclosure and Modification via Migration Wizard0.2%
CVE-2026-108067Low 3.8FV Flowplayer Video Player < 7.5.56.7212 - Contributor+ Arbitrary Video and Meta Record Deletion, Video Modification and Meta Disclosure via IDOR0.2%
CVE-2026-85345Medium 4.1FV Player 7.5.44.7212 - 7.5.54.7212 - Contributor+ SSRF via retrieve_video_data0.2%