Beta

Report

FV Flowplayer Video Player <= 7.5.44.7212 is vulnerable to Unvalidated Redirects and Forwards vulnerability

Contributor
Published
2024-04-10

The FV Flowplayer Video Player plugin for WordPress is vulnerable to unauthorized redirects in all versions up to, and including, 7.5.44.7212. This is due to the plugin not restricting contributor and above users from being able to add redirects at the end of videos. This makes it possible for authenticated attackers, with contributor-level access and above, to redirect administrators to arbitrary sites that can be malicious.

CVSS

Score:4.1

Severity:Medium

Version: 7.5.44.7212

There is a patch available in v7.5.45.7212 and we strongly recommend you update to this version as soon as possible.