CVE-2026-83526 — FV Player 8
The FV Player 8 WordPress plugin is vulnerable to arbitrary file upload in all versions up to and including 8.1.7. Authenticated attackers with subscriber-level access or higher may be able to upload potentially executable files, which could make remote code execution possible.
CERT24