Report
The FV Flowplayer Video Player plugin for WordPress is vulnerable to unauthorized redirects in all versions up to, and including, 7.5.44.7212. This is due to the plugin not restricting contributor and above users from being able to add redirects at the end of videos. This makes it possible for authenticated attackers, with contributor-level access and above, to redirect administrators to arbitrary sites that can be malicious.
Score:4.1
Severity:Medium
Version: 7.5.44.7212
There is a patch available in v7.5.45.7212 and we strongly recommend you update to this version as soon as possible.