CVE-2026-108068

The FV Flowplayer Video Player WordPress plugin (versions 7.4.44.727 through 7.5.55.7212 ) is vulnerable to an authorization flaw in its video-migration functions . Because these functions are only protected by a nonce and lack proper authorization checks, users with Contributor-level permissions...