Skip to content
PluginCanary

FV Flowplayer Video Player

by FolioVision · 10,000+ active installs · Checked 3 Nov 2026
Watch10 Warnings

Watch: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.

76/ 100 Canary Score
Sub-scores for FV Flowplayer Video Player
Ownership100
Maintenance90
Security50
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 7.5.56.7212. Update to version 7.5.56.7212 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 7.5.56.7212. Update to version 7.5.56.7212 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 7.5.56.7212. Update to version 7.5.56.7212 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 28 Oct 2026, fixed in 7.5.57.7212. Update to version 7.5.57.7212 or later.28 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 14 Oct 2026, fixed in 7.5.55.7212. Update to version 7.5.55.7212 or later.14 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 14 Oct 2026, fixed in 7.5.55.7212. Update to version 7.5.55.7212 or later.14 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 7.5.55.7212. Update to version 7.5.55.7212 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 7.5.55.7212. Update to version 7.5.55.7212 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 6 Oct 2026, fixed in 7.5.55.7212. Update to version 7.5.55.7212 or later.6 Oct 2026Evidence
  • InfoSEC-313 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
FolioVision27 Sep 2009 to 3 Nov 2026, 1003 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
today
Releases, 24 months
15
Tested up to
6.9 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for FV Flowplayer Video Player
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 202515
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 3 Nov 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Comments5.4<= 7.5.55.72127.5.56.7212n/a
30 Oct 2026FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes6.4<= 7.5.55.72127.5.56.7212n/a
30 Oct 2026FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attribute5.4<= 7.5.55.72127.5.56.7212n/a
28 Oct 2026FV Flowplayer Video Player <= 7.5.56.7212 - Authenticated (Shop Manager+) PHP Object Injection6.6<= 7.5.56.72127.5.57.7212n/a
14 Oct 2026FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter8.8<= 7.5.54.72127.5.55.7212n/a
14 Oct 2026FV Flowplayer Video Player 7.5.44.7212 - 7.5.55.7211 - Authenticated (Contributor+) Server-Side Request Forgery6.47.5.44.7212 to 7.5.55.72117.5.55.7212n/a
13 Oct 2026FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute7.2<= 7.5.54.72127.5.55.7212n/a
9 Oct 2026FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute6.4<= 7.5.54.72127.5.55.7212n/a
6 Oct 2026FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 7.5.54.72127.5.55.7212n/a
30 Jun 2026FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcode6.4<= 7.5.51.72127.5.52.7212n/a
8 Jun 2026FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text7.2<= 7.5.49.72127.5.50.7212n/a
4 Jun 2026FV Flowplayer Video Player < 7.5.51.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4< 7.5.51.72127.5.51.7212n/a
3 Dec 2024Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library6.4<= 7.5.47.72127.5.48.721265
18 Jul 2024FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter8.8<= 7.5.46.72127.5.47.7212n/a
27 May 2024FV Flowplayer Video Player <= 7.5.45.7212 - Reflected Cross-Site Scripting6.1<= 7.5.45.72127.5.46.7212n/a
22 Apr 2024FV Flowplayer Video Player <= 7.5.43.7212 - Authenticated (Subscriber+) Server-side Request Forgery6.4<= 7.5.43.72127.5.45.7212n/a
11 Apr 2024FV Flowplayer Video Player <= 7.5.44.7212 - Authenticated (Contributor+) Arbitrary Redirect5.4<= 7.5.44.72127.5.45.7212n/a
26 Mar 2024FV Flowplayer Video Player <= 7.5.41.7212 - Reflected Cross-Site Scripting6.1<= 7.5.41.72127.5.44.7212n/a
16 Mar 2024FV Flowplayer Video Player <= 7.5.41.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 7.5.41.72127.5.44.7212n/a
24 Aug 2023FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update5.4<= 7.5.37.72127.5.39.7212532
3 May 2023FV Flowplayer Video Player <= 7.5.32.7212 - Reflected Cross-Site Scripting via id6.1<= 7.5.32.72127.5.35.7212n/a
2 Feb 2023FV Flowplayer Video Player <= 7.5.30.7210 - Cross-Site Request Forgery4.3<= 7.5.30.72107.5.31.7212n/a
4 Apr 2022FV Flowplayer Video Player <= 7.5.18.727 - Stored Cross-Site Scripting6.4<= 7.5.18.7277.5.19.728n/a
18 Mar 2022FV Flowplayer Video Player <= 7.5.15.727 - SQL Injection7.2<= 7.5.15.7277.5.18.727n/a
5 Oct 2021FV Flowplayer Video Player 7.5.0.727 - 7.5.2.727 - Reflected Cross-Site Scripting via player_id Parameter6.17.5.0.727 to 7.5.2.7277.5.3.7271219

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for FV Flowplayer Video Player
Q1 20245.0
Q2 20252.0
Q3 20255.0

Average rating stayed at 5.0 between Q1 2024 and Q3 2025.

Rating distribution
5 star71
4 star5
3 star1
2 star3
1 star10
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for FV Flowplayer Video Player
4 May 2026929
11 May 20261,209
18 May 20261,592
25 May 2026986
1 Jun 20267,930
8 Jun 20262,465
15 Jun 20261,237
22 Jun 20267,076
29 Jun 20262,100
6 Jul 20268,175
13 Jul 20261,472
20 Jul 20261,088
27 Jul 2026955
3 Aug 2026814
10 Aug 2026678
17 Aug 20267,973
24 Aug 20261,537
31 Aug 20261,088
7 Sep 2026805
14 Sep 2026832
21 Sep 2026870
28 Sep 2026693
5 Oct 20268,056
12 Oct 20261,621
19 Oct 20261,639
26 Oct 20268,631
2 Nov 2026336

Weekly downloads over the last 4 weeks are 13% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Easy Video PlayerScore 91 · 20,000+Video Popup - Video Lightbox for YouTube, Vimeo & MP4Score 91 · 10,000+Video Gallery - YouTube Playlist, Channel Gallery by YotuWPScore 91 · 10,000+Embed YouTube Block - Fast Loading Videos, Shorts & PlaylistsScore 91 · 6,000+Simple YouTube EmbedScore 91 · 4,000+

Facts

Version7.5.57.7212
AuthorFolioVision
Added27 Sep 2009
Last updated3 Nov 2026
Active installs10,000+
Requires WordPress3.5
Tested up to6.9.11
Requires PHPnot stated
CategoryContent Management > Media Library & Asset Management
Tagsvimeo, flowplayer, HTML5 video, mobile video, video player

Other plugins by this author: FV Top Level Categories, FV Simpler SEO, FV Clone Screen Options, FV Player 8, FV Antispam, FV Gravatar Cache, WP Mail SMTP SendGrid Edition, Foliopress WYSIWYG, FV Thoughtful Comments, FV Descriptions, Subscribe to Comments Reloaded Better Unsubscribe, BusinessPress

Questions

Is FV Flowplayer Video Player still maintained?

FV Flowplayer Video Player was last updated on 3 Nov 2026. Its Canary status is Watch.

Is FV Flowplayer Video Player safe?

FV Flowplayer Video Player has no open unpatched vulnerabilities on record. 13 vulnerabilities were published in the last 24 months. Its Canary status is Watch.

Who owns FV Flowplayer Video Player?

The wordpress.org author is FolioVision. Recent committers: FolioVision, plugin-master. We have recorded no ownership change.

What can I use instead of FV Flowplayer Video Player?

Plugins in the same category with a higher Canary Score: Easy Video Player, Video Popup - Video Lightbox for YouTube, Vimeo & MP4, Video Gallery - YouTube Playlist, Channel Gallery by YotuWP, Embed YouTube Block - Fast Loading Videos, Shorts & Playlists, Simple YouTube Embed.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue