All 2 CVE vulnerabilities found in FV Player 8, with AI-generated Chinese analysis, references, and POCs.
Vendor: foliovision
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-42699 | WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2026-10-10 |
| CVE-2026-83526 | FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter CWE-434 | 8.8 | High | 2026-10-10 |
All 2 known CVE vulnerabilities affecting FV Player 8 with full Chinese analysis, references, and POCs where available.