WordPress FV Flowplayer Video Player plugin <= 8.3.4 - PHP Object Injection vulnerability

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• patchstack.com/…lugin-8-3-4-php-object-injection-vulnerability Diğer

Kayıt geçmişi

1. 29 Eki 2026 18:24Yayımlandı

İlgili açıklar

• 5,4 CVE-2026-109984FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Comments
• 6,4 CVE-2026-110533FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes
• 5,4 CVE-2026-110001FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attribute
• 8,8 CVE-2026-118938Fickling check_safety() bypass: dotted __qualname__ in STACK_GLOBAL resolves a class-method attribute path that evades call analysis
• 8,8 CVE-2026-16760Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables
• 7,3 CVE-2026-62848Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code execution