CVE-2026-7556

The flaw

The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment text in all versions up to, and including, 7.5.49.7212 due to insufficient input sanitization and output escaping. This makes i

What to do

Review advisory and patch per vendor guidance.

References