Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
FolioVision CVE-2026-121764
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowpl
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Foliovision CVE-2026-121515
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and includin
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Foliovision CVE-2026-110533
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fv_player_videos[_fv_player_user_video][]' parameter i
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Foliovision CVE-2026-110001
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment (shortcode attribute 'align')' parameter in al
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Foliovision CVE-2026-109984
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and includin
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
FolioVision CVE-2026-118079
Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
FolioVision foliovision-2026-10
FolioVision Security Releases - October 2026
4 CVEs and 4 credit lines. None claimed yet.
0 of 4 credit lines claimed Claim credit