Latest vulnerabilities for vendor "foliovision"

7.1

First published (updated )

CVE-2025-22628

Foliovision FV Thoughtful CommentsWordPress FV Thoughtful Comments plugin <= 0.3.5 - Broken Access Control vulnerability

4.3

EPSS

0.04%

First published (updated )

CVE-2025-24613

Flowplayer Video PlayerFV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter

8.8

EPSS

0.06%

First published (updated )

CVE-2024-6338

Flowplayer Video PlayerWordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability

7.1

EPSS

0.04%

First published (updated )

CVE-2024-35631

Flowplayer Video PlayerWordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability

4.1

EPSS

0.06%

First published (updated )

CVE-2024-32078

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Flowplayer Video PlayerWordPress FV Flowplayer Video Player plugin <= 7.5.43.7212 - Server Side Request Forgery (SSRF) vulnerability

4.9

EPSS

0.04%

First published (updated )

CVE-2024-32955

Flowplayer Video PlayerWordPress FV Player plugin <= 7.5.41.7212 - Reflected Cross Site Scripting (XSS) vulnerability

7.1

EPSS

0.04%

First published (updated )

CVE-2024-22299

Flowplayer Video PlayerWordPress FV Player plugin <= 7.5.41.7212 - Cross Site Scripting (XSS) vulnerability

6.5

EPSS

0.04%

First published (updated )

CVE-2024-29122

Flowplayer Video PlayerXSS

6.1

First published (updated )

CVE-2023-4520

Flowplayer Video PlayerWordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)

7.1

First published (updated )

CVE-2023-30499

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Flowplayer Video PlayerWordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)

8.8

First published (updated )

CVE-2023-25066

Flowplayer Video PlayerWordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

5.4

First published (updated )

CVE-2022-25613

Flowplayer Video PlayerWordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability

7.2

First published (updated )

CVE-2022-25607

Flowplayer Video PlayerFV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting

8.2

First published (updated )

CVE-2021-39350

Flowplayer Video PlayerXSS

5.4

First published (updated )

CVE-2020-35748

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Flowplayer Video PlayerInfoleak

5.3

First published (updated )

CVE-2019-14800

Flowplayer Video PlayerSQL Injection

critical

9.8

First published (updated )

CVE-2019-14801

Flowplayer Video PlayerXSS

6.1

First published (updated )

CVE-2019-14799

Flowplayer Video PlayerSQL Injection

critical

10

First published (updated )

CVE-2019-13573

Flowplayer Video PlayerXSS

6.1

First published (updated )

CVE-2018-0642

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Foliovision Foliopress WysiwygXSS

4.3

First published (updated )

CVE-2014-1232

Flowplayer Video PlayerXSS