WP VR
RexTheme · 8 CVEs
WordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerability
Oct 27, 2025
WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-…
Jun 28, 2025
WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability
Jun 17, 2025
WordPress WP VR plugin <= 8.5.14 - Cross Site Scripting (XSS) vulnerability
Jan 24, 2025
WordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerability
Nov 19, 2024
WordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerability
Oct 21, 2024
WP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSS
Jan 8, 2024
WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)
Sep 27, 2023
WP VR < 8.3.0 - Subscriber+ Arbitrary Tour Update
Apr 24, 2023
WP VR < 8.2.9 - Reflected XSS
Apr 17, 2023
WordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin <= 8.2.7 is vulnerable to Cross Site Reque…
Mar 15, 2023
WP VR < 8.2.7 - Contributor+ Stored XSS
Feb 6, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-62885 | WordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.21% | Oct 27, 2025 |
| CVE-2025-6350 | WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 0.25% | Jun 28, 2025 |
| CVE-2025-47452 | WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability | CRITICAL | 0.51% | Jun 17, 2025 |
| CVE-2025-24730 | WordPress WP VR plugin <= 8.5.14 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.31% | Jan 24, 2025 |
| CVE-2024-49680 | WordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerability | MEDIUM | 0.41% | Nov 19, 2024 |
| CVE-2024-49293 | WordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerability | MEDIUM | 0.26% | Oct 21, 2024 |
| CVE-2023-6529 | WP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSS | MEDIUM | 0.22% | Jan 8, 2024 |
| CVE-2023-40663 | WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS) | HIGH | 0.39% | Sep 27, 2023 |
| CVE-2023-1414 | WP VR < 8.3.0 - Subscriber+ Arbitrary Tour Update | MEDIUM | 0.25% | Apr 24, 2023 |
| CVE-2023-1413 | WP VR < 8.2.9 - Reflected XSS | MEDIUM | 0.46% | Apr 17, 2023 |
| CVE-2023-25708 | WordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin <= 8.2.7 is vulnerable to Cross Site Request Forgery (CSRF) | HIGH | 0.26% | Mar 15, 2023 |
| CVE-2023-0174 | WP VR < 8.2.7 - Contributor+ Stored XSS | MEDIUM | 0.65% | Feb 6, 2023 |
Showing 1 to 8 of 8 CVEs