Medium · 6.6 CVE-2022-25607 EUVD-2022-30267GHSA-vg8x-cp5j-g9cw

WordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability

Published Mar 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: foliovision Product: FV Flowplayer Video Player (WordPress plugin) Category: Web / CMS

Description

Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727).

Affected products

Vendor	Product	Affected	Fixed
FolioVision	FV Flowplayer Video Player (WordPress plugin)	<= 7.5.15.727 – ≤ 7.5.15.727	—

References

https://wordpress.org/plugins/fv-wordpress-flowplayer/#developers
https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-15-727-sql-injection-sqli-vulnerability