---
id: "CVE-2026-108067"
kind: "vulnerability"
aliases: ["CVE-2026-108067"]
title: "FV Flowplayer WordPress plugin: contributors can edit or delete other users' videos"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["fv-flowplayer", "runtime", "self-hosted", "wordpress"]
not_affected_if: ["no-contributor-accounts", "plugin-version-7.5.56.7212-or-later"]
published_at: "2026-11-04T06:16:58+00:00"
first_seen_at: "2026-11-04T06:25:17+00:00"
updated_at: "2026-11-04T06:26:30+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108067", "first_seen_at": "2026-11-04T06:25:17+00:00"}]
---

# FV Flowplayer WordPress plugin: contributors can edit or delete other users' videos

The FV Flowplayer Video Player WordPress plugin does not check who owns a video or meta record before changing or deleting it. A logged-in Contributor or higher can modify or delete other users' records and read their associated metadata.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed FV Flowplayer plugin version in the WordPress admin Plugins page or `wp plugin get fv-wordpress-flowplayer --field=version`
- Confirm whether any users with Contributor-level access or above exist on the site

## Fix

- FV Flowplayer Video Player WordPress plugin: upgrade to `7.5.56.7212` or later

## Timeline

- 2026-11-04T06:25:17+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108067

## From the sources

The FV Flowplayer Video Player WordPress plugin before 7.5.56.7212 does not properly verify record ownership before modifying or deleting stored video and meta records, allowing authenticated users with Contributor-level access and above to modify or delete arbitrary records belonging to other users, and to disclose the associated meta data in the response.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_