What is GHSA-7p26-8g5q-c3vw?

GHSA-7p26-8g5q-c3vw is a security advisory published by GitHub Security Advisories with Low severity. The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform proper...

Which CVE IDs does GHSA-7p26-8g5q-c3vw cover?

GHSA-7p26-8g5q-c3vw covers the following CVE IDs: CVE-2026-108068. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7p26-8g5q-c3vw?

GHSA-7p26-8g5q-c3vw has a CVSS v3 base score of 3.8, published by GitHub Security Advisories.

GHSA-7p26-8g5q-c3vwLowCVSS 3.8

The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform proper...

Vendor

GitHub Security Advisories

Published

November 4, 2026

Last Modified

November 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-108068 →

📋 Description

The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not perform proper authorization checks on one of its video-migration functions, which is protected by a nonce only, allowing users with Contributor-level permissions and above to disclose and bulk-modify the FV Flowplayer Video Player WordPress plugin before 7.5.56.7212's stored video records across the whole site.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-108068
https://wpscan.com/vulnerability/22aec931-839e-4b2e-bb40-6d00e58706ee
https://github.com/advisories/GHSA-7p26-8g5q-c3vw