Lucene search

CVE-2024-6338

🗓️ 19 Jul 2024 08:02:15Reported by WordfenceType

The FV Flowplayer Video Player plugin for WordPress is vulnerable to time-based SQL Injection via the 'exclude' parameter in all versions up to, and including, 7.5.46.7212 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query

Reporter	Title	Published	Views	Family All 5
Patchstack	WordPress FV Flowplayer Video Player Plugin <= 7.5.46.7212 is vulnerable to SQL Injection	19 Jul 202400:00	–	patchstack
Cvelist	CVE-2024-6338 FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter	19 Jul 202407:36	–	cvelist
Vulnrichment	CVE-2024-6338 FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter	19 Jul 202407:36	–	vulnrichment
NVD	CVE-2024-6338	19 Jul 202408:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 15, 2024 to July 21, 2024)	25 Jul 202414:49	–	wordfence

Nvd

Vulners

Vulnrichment

Node

foliovision fv_flowplayer_video_playerRange<7.5.47.7212wordpress

[
  {
    "vendor": "foliovision",
    "product": "FV Flowplayer Video Player",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "7.5.46.7212",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/fv-wordpress-flowplayer/trunk/models/video-encoder/class.fv-player-encoder-list-table.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/d4185a0e-d944-408f-8a43-8f9c6bc3964d
wordpress	www.wordpress.org/plugins/fv-wordpress-flowplayer/
plugins	www.plugins.trac.wordpress.org/changeset/3121532/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Jul 2024 08:15Current

8.7High risk

Vulners AI Score8.7

CVSS38.8

EPSS0.00045

SSVC

CWE-89