CVE-2026-118079: WordPress FV Flowplayer Video Player plugin <= 8.3.4 - PHP Object Injection vulnerability

Q: What level of access does an attacker need to exploit this issue?

The vulnerability requires shop manager privileges. It is not described as exploitable by unauthenticated users or lower-privileged accounts.

Q: Which deployments are affected?

FV Flowplayer Video Player versions up to and including 8.3.4 are affected. The provided information does not state whether any particular configuration is required.

Q: What is the potential impact if exploited?

The issue is rated high with a CVSS score of 7.2 and impacts confidentiality, integrity, and availability at high severity. Successful exploitation could therefore have serious consequences for the affected WordPress site.

Published Oct 29, 2026

Updated

Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:24 PM

Data Sourced

via MITRE·03:24 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability requires shop manager privileges. It is not described as exploitable by unauthenticated users or lower-privileged accounts.

Which deployments are affected?

FV Flowplayer Video Player versions up to and including 8.3.4 are affected. The provided information does not state whether any particular configuration is required.

What is the potential impact if exploited?

The issue is rated high with a CVSS score of 7.2 and impacts confidentiality, integrity, and availability at high severity. Successful exploitation could therefore have serious consequences for the affected WordPress site.

CVE-2026-118079: WordPress FV Flowplayer Video Player plugin <= 8.3.4 - PHP Object Injection vulnerability

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which deployments are affected?

What is the potential impact if exploited?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which deployments are affected?

What is the potential impact if exploited?