Product by FolioVision
Fv Flowplayer Video Player
30 known vulnerabilities in Fv Flowplayer Video Player (FolioVision), 0 of them actively exploited (CISA KEV).
Key figures
30
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-13573 | FV Flowplayer Video Player: SQL Injection | 9.8 | |
| Critical | CVE-2019-14801 | FV Flowplayer Video Player: SQL Injection | 9.8 | |
| High | CVE-2026-86461 | FolioVision FV Flowplayer Video Player: Unrestricted Upload of File with Dangerous Type | 8.8 | |
| Medium | CVE-2021-39350 | FV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting | 6.1 | |
| Medium | CVE-2019-14799 | FV Flowplayer Video Player: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2019-14800 | FV Flowplayer Video Player: security vulnerability | 5.3 | |
| High | CVE-2026-97398 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 7.2 | |
| High | CVE-2026-118079 | WordPress FV Flowplayer Video Player plugin <= 7.5.56.7212 - PHP Object Injection vulnerability | 7.2 | |
| Medium | CVE-2026-110533 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-109984 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 5.4 | |
| High | CVE-2026-121764 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 7.1 | |
| High | CVE-2024-6338 | FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter | 8.8 | |
| Medium | CVE-2018-0642 | Foliovision FV Flowplayer Video Player: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2026-110001 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 5.4 | |
| Medium | CVE-2026-97630 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 6.4 | |
| Medium | CVE-2026-42695 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 6.5 | |
| High | CVE-2022-25607 | WordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability | 6.6 | |
| Medium | CVE-2026-121515 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 5.4 | |
| Medium | CVE-2026-12135 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 6.4 | |
| Medium | CVE-2020-35748 | FV Flowplayer Video Player: Cross-Site Scripting (XSS) | 5.4 | |
| High | CVE-2026-7556 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 7.2 | |
| Medium | CVE-2026-49773 | WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability | 6.5 | |
| Medium | CVE-2024-5020 | ExtendThemes Colibri Page Builder: Cross-site Scripting | 6.4 | |
| High | CVE-2023-30499 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 7.1 | |
| Medium | CVE-2023-4520 | FolioVision FV Flowplayer Video Player: Cross-site Scripting | 5.4 |