CPE
Authenticated users can achieve remote code execution in FV Flowplayer Video Player for WordPress <= 7.5.54.7212 by bypassing incomplete file type validation in the check_mimetype function.