CVE-2022-25607: Foliovision Fv Flowplayer Video Player

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727).

Affected products

• Foliovision Fv Flowplayer Video Player: up to and including 7.5.15.727

Published 2022-03-18. Last modified 2026-06-17.