FV Flowplayer Video Player

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

198 searches this plugin appeared in over the last 90 days, 20 listed. 153 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 87% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 3 months ago and the previous band took 2.2 years to cross, so the real count is still just under 20K.

1. ★★★★★ zuzanamolnarova

   1.2y ago

   FV Player Plugin has been an absolute game-changer for us! 🎉We finally have a clear and professional video library for our clients – completely ad-free and incredibly easy to use. It works flawlessly on WordPress, looks fantastic on mobile, and has made content management so much easier. On top of that, the team offers absolutely professional customer service, always ready to help quickly and efficiently. If you want to give your clients a comfortable, distraction-free video experience, this plugin is exactly what you need.Huge thanks to the creators – it’s truly an invaluable tool for online presentation and education! 🙌

   Read on wp.org ↗
2. ★★★★★ bernardberry646

   1.5y ago

   The front page description says, “unlike other players who nickel and dime you”.. but yet you want to charge $25 JUST to change my license from an REALLY old domain that I’ve never even used the player on to the domain I need it on now.

   Read on wp.org ↗
3. ★★★★★ christinahills

   2.7y ago

   If you want a video plugin to add your own hosted videos, use FV Player it works great and the support is excellent! In fact, the plugin is so good, that I have only had to contact support once in the last 7 years that I have been using it thanks for being awesome!! -Christina

   Read on wp.org ↗
4. ★★★★★ andrew55

   3.1y ago

   Used it for several years now. Easy to implement. Feature rich. Updated frequently. This topic was modified 2 years, 10 months ago by andrew55.

   Read on wp.org ↗
5. ★★★★★ Sirmadsen

   3.2y ago

   Useless watermark that does nothing except ruining for the viewer. We get it, you want to sell you pro license. A watermark won’t do that though.

   Read on wp.org ↗
6. ★★★★★ ed

   4.1y ago

   It can be tricky to find a video player plugin that is updated regularly and that works across all devices. Not to mention at a reasonable cost. These guys know their stuff, the support system is excellent if/when you run into issues.

   Read on wp.org ↗
7. ★★★★★ meirk

   4.2y ago

   bsd i looked after a shortcode full customizing video player with playlists. Found here exactly what i wanted and much more.

   Read on wp.org ↗
8. ★★★★★ petrusmaximus

   4.4y ago

   Free Version comes with watermark – waste of time

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-10-28 Version 7.5.56.7212 Security: Avoid Subscriber-level attacker to overwrite any existing video record using an enumerable video ID, if using “Enable profile videos” (CVE-2026-108067) Security: Avoid Contributor+ SSRF via the splash image dow 7.5.56.7212
2. 2026-10-06 Version 7.5.55.7212 Security: Enable profile videos setting: Authenticated (Subscriber+) arbitrary file upload, if using “Enable profile videos” setting Security: Enable profile videos setting: Authenticated (Subscriber+) stored XSS via unq 7.5.55.7212
3. 2026-08-18 Version 7.5.54.7212 Security: Email Popups: Avoid storing and exporting CSV values that would get interpreted by old Microsoft Excel when opening such CSV export 7.5.54.7212
4. 2026-07-07 Version 7.5.53.7212 Bugfix: Rename unload event internally to avoid issues with certain Google Chrome configurations 7.5.53.7212
5. 2026-06-25 Version 7.5.52.7212 Security fix – OptimizePress integration fix 7.5.52.7212
6. 2026-06-02 Version 7.5.51.7212 Security fix – with “Enable profile videos” setting logged in users can no longer change profile videos of other users Security fix – with “Enable profile videos” setting logged in users can no longer store videos with a 7.5.51.7212

All 35 disclosed vulnerabilities are patched in the current version (7.5.56.7212). Sites still on an older version should update.

1. Patched Medium · 5.4 FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'ad' Shortcode Attribute in Comments ↗
   2026-10-30 CVE-2026-109984 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.55.7212 Patched in 7.5.56.7212
2. Patched Medium · 6.4 FV Flowplayer Video Player <= 7.5.55.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Shortcode Attributes ↗
   2026-10-30 CVE-2026-110533 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.55.7212 Patched in 7.5.56.7212
3. Patched Medium · 5.4 FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenticated Stored Cross-Site Scripting via 'align' Shortcode Attribute ↗
   2026-10-30 CVE-2026-110001 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.55.7212 Patched in 7.5.56.7212
4. Patched High · 8.8 FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter ↗
   2026-10-14 CVE-2026-86461 Unrestricted Upload of File with Dangerous Type Affects <= 7.5.54.7212 Patched in 7.5.55.7212
5. Patched Medium · 6.4 FV Flowplayer Video Player 7.5.44.7212 - 7.5.55.7211 - Authenticated (Contributor+) Server-Side Request Forgery ↗
   2026-10-14 CVE-2026-85345 Server-Side Request Forgery Affects 7.5.44.7212 - 7.5.55.7211 Patched in 7.5.55.7212
6. Patched High · 7.2 FV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute ↗
   2026-10-13 CVE-2026-97398 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.54.7212 Patched in 7.5.55.7212
7. Patched Medium · 6.4 FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute ↗
   2026-10-09 CVE-2026-97630 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.54.7212 Patched in 7.5.55.7212
8. Patched Medium · 6.4 FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2026-10-06 CVE-2026-42695 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.54.7212 Patched in 7.5.55.7212
9. Patched Medium · 6.4 FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcode ↗
   2026-06-30 CVE-2026-12135 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.51.7212 Patched in 7.5.52.7212
10. Patched High · 7.2 FV Flowplayer Video Player <= 7.5.49.7212 - Unauthenticated Stored Cross-Site Scripting via Comment Text ↗
    2026-06-08 CVE-2026-7556 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.49.7212 Patched in 7.5.50.7212
11. Patched Medium · 6.4 FV Flowplayer Video Player < 7.5.51.7212 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
    2026-06-04 CVE-2026-49773 Improper Neutralization of Input During Web Page Generation Affects < 7.5.51.7212 Patched in 7.5.51.7212
12. Patched Medium · 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library ↗
    2024-12-03 CVE-2024-5020 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.47.7212 Patched in 7.5.48.7212
13. Patched High · 8.8 FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter ↗
    2024-07-18 CVE-2024-6338 Improper Neutralization of Special Elements used in an SQL Command Affects <= 7.5.46.7212 Patched in 7.5.47.7212
14. Patched Medium · 6.1 FV Flowplayer Video Player <= 7.5.45.7212 - Reflected Cross-Site Scripting ↗
    2024-05-27 CVE-2024-35631 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.45.7212 Patched in 7.5.46.7212
15. Patched Medium · 6.4 FV Flowplayer Video Player <= 7.5.43.7212 - Authenticated (Subscriber+) Server-side Request Forgery ↗
    2024-04-22 CVE-2024-32955 Server-Side Request Forgery Affects <= 7.5.43.7212 Patched in 7.5.45.7212
16. Patched Medium · 5.4 FV Flowplayer Video Player <= 7.5.44.7212 - Authenticated (Contributor+) Arbitrary Redirect ↗
    2024-04-11 CVE-2024-32078 URL Redirection to Untrusted Site Affects <= 7.5.44.7212 Patched in 7.5.45.7212
17. Patched Medium · 6.1 FV Flowplayer Video Player <= 7.5.41.7212 - Reflected Cross-Site Scripting ↗
    2024-03-26 CVE-2024-22299 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.41.7212 Patched in 7.5.44.7212
18. Patched Medium · 6.4 FV Flowplayer Video Player <= 7.5.41.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-03-16 CVE-2024-29122 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.41.7212 Patched in 7.5.44.7212
19. Patched Medium · 5.4 FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update ↗
    2023-08-24 CVE-2023-4520 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.37.7212 Patched in 7.5.39.7212
20. Patched Medium · 6.1 FV Flowplayer Video Player <= 7.5.32.7212 - Reflected Cross-Site Scripting via id ↗
    2023-05-03 CVE-2023-30499 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.32.7212 Patched in 7.5.35.7212
21. Patched Medium · 4.3 FV Flowplayer Video Player <= 7.5.30.7210 - Cross-Site Request Forgery ↗
    2023-02-02 CVE-2023-25066 Cross-Site Request Forgery Affects <= 7.5.30.7210 Patched in 7.5.31.7212
22. Patched Medium · 6.4 FV Flowplayer Video Player <= 7.5.18.727 - Stored Cross-Site Scripting ↗
    2022-04-04 CVE-2022-25613 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.18.727 Patched in 7.5.19.728
23. Patched High · 7.2 FV Flowplayer Video Player <= 7.5.15.727 - SQL Injection ↗
    2022-03-18 CVE-2022-25607 Improper Neutralization of Special Elements used in an SQL Command Affects <= 7.5.15.727 Patched in 7.5.18.727
24. Patched Medium · 6.1 FV Flowplayer Video Player 7.5.0.727 - 7.5.2.727 - Reflected Cross-Site Scripting via player_id Parameter ↗
    2021-10-05 CVE-2021-39350 Improper Neutralization of Input During Web Page Generation Affects 7.5.0.727 - 7.5.2.727 Patched in 7.5.3.727
25. Patched Medium · 6.4 FV Flowplayer Video Player <= 7.4.37.727 - Authenticated Stored Cross-Site Scripting ↗
    2021-01-15 CVE-2020-35748 Improper Neutralization of Input During Web Page Generation Affects <= 7.4.37.727 Patched in 7.4.38.727
26. Patched Critical · 9.8 FV Flowplayer Video Player <= 7.3.18.727 - SQL Injection ↗
    2019-07-11 CVE-2019-13573 Improper Neutralization of Special Elements used in an SQL Command Affects <= 7.3.18.727 Patched in 7.3.19.727
27. Patched Medium · 5.3 FV Flowplayer Video Player <= 7.3.14.727 - Sensitive Information Exposure ↗
    2019-05-20 CVE-2019-14800 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 7.3.14.727 Patched in 7.3.15.727
28. Patched Critical · 9.8 FV Flowplayer Video Player <= 7.3.14.727 - SQL Injection ↗
    2019-05-20 CVE-2019-14801 Improper Neutralization of Special Elements used in an SQL Command Affects < 7.3.15.727 Patched in 7.3.15.727
29. Patched Medium · 6.1 FV Flowplayer Video Player <= 7.3.13.727 - Unauthenticated Stored Cross-Site Scripting ↗
    2019-05-20 CVE-2019-14799 Improper Neutralization of Input During Web Page Generation Affects <= 7.3.13.727 Patched in 7.3.14.727
30. Patched Medium · 5.3 FV Flowplayer Video Player <= 7.3.14.727 - Sensitive Data Exposure ↗
    2019-05-16 Exposure of Sensitive Information to an Unauthorized Actor Affects < 7.3.15.727 Patched in 7.3.15.727
31. Patched Critical · 9.3 FV Flowplayer Video Player <= 7.3.14.727 - Unauthenticated SQL Injection ↗
    2019-05-16 Improper Neutralization of Special Elements used in an SQL Command Affects < 7.3.15.727 Patched in 7.3.15.727
32. Patched Medium · 6.1 FV Flowplayer Video Player <= 7.2.0.727 - Reflected Cross-Site Scripting ↗
    2018-09-21 Improper Neutralization of Input During Web Page Generation Affects <= 7.2.0.727 Patched in 7.2.1.727
33. Patched Medium · 6.1 FV Flowplayer Video Player 6.1.2 - 6.6.4 - Cross-Site Scripting ↗
    2018-07-02 CVE-2018-0642 Improper Neutralization of Input During Web Page Generation Affects 6.1.2 - 6.6.4 Patched in 6.6.5
34. Patched Medium · 5.3 FV Flowplayer Video Player <= 6.0.3.3 - Stored Cross-Site Scripting ↗
    2015-08-24 Improper Neutralization of Input During Web Page Generation Affects <= 6.0.3.3 Patched in 6.0.3.4
35. Patched Medium · 6.1 FV Flowplayer Video Player <= 1.2.11 - Cross-Site Scripting ↗
    2011-07-22 CVE-2011-4568 Improper Neutralization of Input During Web Page Generation Affects <= 1.2.11 Patched in 1.2.12

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 88 languages, 6 at 90% or more · development strings

Plus 64 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-07 20K+ → 10K+ down after 816 days in tier
2. 2024-05-13 30K+ → 20K+ down after 1 days in tier
3. 2024-05-12 20K+ → 30K+ up after 1 days in tier
4. 2024-05-11 30K+ → 20K+ down after 1 days in tier
5. 2024-05-10 20K+ → 30K+ up after 1 days in tier
6. 2024-05-09 30K+ → 20K+ down after 583 days in tier
7. 2022-10-04 40K+ → 30K+ down after 1522 days in tier
8. 2018-08-04 30K+ → 40K+ up after 119 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for FV Flowplayer Video Player into a readme, a review or a deck. It updates itself.

FV Flowplayer Video Player: 10K+ active installs, 4.4★ (90 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/fv-wordpress-flowplayer