CVE-2022-25607

Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727).

Score

CVSS 3.1 7.2 High

Status

Modified - audit@patchstack.com

Published

2022-03-18

Last modified

2026-04-28

Weaknesses

CWE-89

Affected products

• Fv Flowplayer Video Player (Foliovision)
• Fv Flowplayer Video Player Wordpress Plugin (Foliovision)

References

• https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-1…
• https://wordpress.org/plugins/fv-wordpress-flowplayer/#developers