Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 23:47:31 +0000 CVE-2026-85344 — FV Player < 7.5.57.7212 - Subscriber+ Bulk Post Modification via Missing Authorization https://db.gcve.eu/vuln/cve-2026-85344 <p><strong>Affected:</strong> Unknown FV Flowplayer Video Player</p> <p>The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not perform any authorization check on an AJAX action that carries out a site-wide content rewrite, so any authenticated user, including subscriber-level, can trigger a bulk modification of posts they should not be able to edit.</p> <p><strong>Affected:</strong> Unknown FV Flowplayer Video Player</p> <p>The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not perform any authorization check on an AJAX action that carries out a site-wide content rewrite, so any authenticated user, including subscriber-level, can trigger a bulk modification of posts they should not be able to edit.</p> https://db.gcve.eu/vuln/cve-2026-85344