Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #5

FV Flowplayer WordPress plugin hit by reflected XSS vulnerability

Original: 🚨 EUVD-2026-117336 📊 Score: n/a 📦 Product: FV Flowplayer Video Player 🏢 Vendor: Unknown 📅 Updated: 2026-11-05 📝 The FV F

A new vulnerability listing, EUVD-2026-117336, flags the FV Flowplayer Video Player WordPress plugin in versions before 7.5.56.7212. The plugin fails to sanitize and escape a user-supplied value before outputting it in a page, allowing a reflected cross-site scripting attack. Site administrators running the plugin are advised to update to the patched version.

Why now: WordPress plugin vulnerabilities affect many site owners who need to patch quickly.

FV Flowplayer Video PlayerWordPressEUVD-2026-117336

Open on mastodon →

Evidence

• 🚨 EUVD-2026-117336 📊 Score: n/a 📦 Product: FV Flowplayer Video Player 🏢 Vendor: Unknown 📅 Updated: 2026-11-05 📝 The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not sanitize and escape a user-supplied value before outputting it in a page, which could… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4966559