CVE-2026-85344

The FV Flowplayer Video Player WordPress plugin (versions before 7.5.57.7212 ) is vulnerable to an authorization bypass. The plugin fails to perform an authorization check on an AJAX action designed for site-wide content rewrites. This allows any authenticated user , including those with low-leve...