FolioVision vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20222
3. 20233
4. 20245
5. 20256
6. 202615

Newest CVEs

• CVE-2026-109984

  FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Comments

  foliovision · FV Flowplayer Video Player

  Medium5.4
• CVE-2026-110533

  FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes

  foliovision · FV Flowplayer Video Player

  Medium6.4
• CVE-2026-110001

  FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attribute

  foliovision · FV Flowplayer Video Player

  Medium5.4
• CVE-2026-118079

  WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerability

  FolioVision · FV Flowplayer Video Player

  High7.2
• CVE-2026-86461

  FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter

  foliovision · FV Flowplayer Video Player

  High8.8
• CVE-2026-97398

  FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute

  foliovision · FV Flowplayer Video Player

  High7.2
• CVE-2026-95807

  FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute

  foliovision · FV Player 8

  Medium6.4
• CVE-2026-54868

  WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability

  FolioVision · FV Simpler SEO

  Medium6.5
• CVE-2026-42699

  WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability

  FolioVision · FV Player 8

  High7.1
• CVE-2026-83526

  FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter

  foliovision · FV Player 8

  High8.8