CVE-2026-85344
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 08, 2026
Vendor
unknown
Description
The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not perform any authorization check on an AJAX action that carries out a site-wide content rewrite, so any authenticated user, including subscriber-level, can trigger a bulk modification of posts they should not be able to edit.