Threats tagged 'ghsa-4xwf-gr64-f25h'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-85346The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform authorization or CSRF checks on High2026-11-05GCVE DatabaseCVE-2026-85346 The FV Flowplayer Video Player WordPress plugin versions before 7.5.56.7212 lack authorization and CSRF checks on certain cloud storage media browser handlers. This flaw allows any authenticated user, even with minimal permissions like Subscriber, to access configuration details and file listings of the site's connected cloud storage accounts. Report on CVE-2026-85346 Vulnerability #ghsa-4xwf-gr64-f25h	GCVE Database	2026-11-05

Page 1 of 1