CVE-2026-86461 - FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter
CVE ID :CVE-2026-86461 Published : Oct. 14, 2026, 6:19 p.m. | 1 hour, 13 minutes ago Description :The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 7.5.54.7212 via the check_mimetype function. This is due...