Unrated severityNVD Advisory· Published Nov 4, 2026
CVE-2026-108067
CVE-2026-108067
Description
The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not properly verify record ownership before modifying or deleting stored video and meta records, allowing authenticated users with Contributor-level access and above to modify or delete arbitrary records belonging to other users, and to disclose the associated meta data in the response.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <7.5.56.7212
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.