Flowplayer Video Player

Flowplayer Video Player has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Flowplayer Video Player has a vendor fix available, so running the current release closes it.

All of these findings were reported by István Márton. Flowplayer Video Player is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Flowplayer Video Player vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2022-3984

Flowerplayer Video Player <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Flowplayer Video Player banner
Latestv1.0.5

Flowplayer Video Player

Noor Alam

Author

Noor Alam

4.0(6)
80/100
Last Updated
2022-11-14 (4y ago)
Active Installs
900+
Downloads
46,748
Requires WP
4.2+
Requires PHP
0+
Tested up to
WP 6.1.12
Created
2015-06-13 (11y ago)

Flowplayer Video Player adds a video shortcode to your WordPress site. This shortcode allows you to embed a video file and play it back using the Flowplayer HTML5 player. Features Embed MP4 videos Embed webm videos Embed videos which can be viewed from a mobile or tablet device Video playback support for iOS (ipad, iphone) and android devices Embed HTML5 videos which are playable across all major browsers Embed videos with poster images Embed videos and allow it to loop to the beginning when finished Customize the video player using modifier classes Automatically play a video when the page is rendered Embed videos using three different skins Automatically calculate the height of a video based on its width Flexible resizing of a video (true responsiveness) Embed a video with various aspect ratios (16:9, 4:3) Usage In order to embed a video, create a new post/page and use the following shortcode: [flowplayer src="http://example.com/wp-content/uploads/videos/test.mp4"] here, src is the actual source of your mp4 video file. In addition to the source mp4 video file, you can also specify a webm video file. This step is optional since mp4 video format is supported by almost all major browsers. [flowplayer src="http://example.com/wp-content/uploads/videos/test.mp4" webm="http://example.com/wp-content/uploads/videos/test.webm"] Poster Image If you want to show an image as placeholder before the video plays, you can specify it in the “poster” parameter: [flowplayer src="http://example.com/wp-content/uploads/videos/test.mp4" poster="http://example.com/wp-content/uploads/images/poster.jpg"] Autoplay Video If you want a particular video to start playing when the page loads you can set the “autoplay” option to “true”: [flowplayer src="http://example.com/wp-content/uploads/videos/test.mp4" autoplay="true"] Player Size By default, the player takes up the full width of the content area. You can easily control the size by specifying a width for it: [flowplayer src="http://example.com/wp-content/uploads/videos/test.mp4" width="500"] The height will be automatically determined based on the ratio (please see the “Control Player Ratio section” for details). Player Ratio The player ratio is set to “0.417” by default. But you can override it by specifying a different ratio in the shortcode: [flowplayer src="http://example.com/wp-content/uploads/videos/test.mp4" ratio="0.345"] Loop Video If you want a particular video to start playing again when it ends you can set the “loop” option to “true”: [flowplayer src="http://example.com/wp-content/uploads/videos/test.mp4" loop="true"] For documentation please visit the Flowplayer Video Player plugin page

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C