[ Vendor · 8 CVEs ]
foliovision
CVEs affecting foliovision published in the last 30 days, plus any foliovision CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-86461 | 14 Oct 2026 | CVSS 8.8 | foliovision FV Flowplayer Video PlayerThe FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 7.5.54.7212… | |
| CVE-2026-97398 | 14 Oct 2026 | CVSS 7.2 | foliovision FV Flowplayer Video PlayerThe FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions… | |
| CVE-2026-95807 | 14 Oct 2026 | CVSS 6.4 | foliovision FV Player 8The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to, and… | |
| CVE-2026-54868 | 13 Oct 2026 | CVSS 6.5 | FolioVision FV Simpler SEOImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO… | |
| CVE-2026-42699 | 10 Oct 2026 | CVSS 7.1 | FolioVision FV Player 8Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions. | |
| CVE-2026-83526 | 10 Oct 2026 | CVSS 8.8 | foliovision FV Player 8The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype… | |
| CVE-2026-97630 | 10 Oct 2026 | CVSS 6.4 | foliovision FV Flowplayer Video PlayerThe FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute in all… | |
| CVE-2026-42695 | 9 Oct 2026 | CVSS 6.5 | FolioVision FV Flowplayer Video PlayerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer Video Player… |