Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-70823
HistoryMar 22, 2022 - 12:00 a.m.

WordPress FV Flowplayer Video Player plugin SQL injection vulnerability

2022-03-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
wordpress
sql injection
fv flowplayer video player
php
sql commands
database security

EPSS

0.001

Percentile

37.0%

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress FV Flowplayer Video Player plugin version 7.5.15.727 and earlier versions are vulnerable to SQL injection. The vulnerability stems from the application’s lack of validation of externally entered SQL statements. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.001

Percentile

37.0%

Related for CNVD-2022-70823