Rextheme vulnerabilities

Products

• Wp Vr 11
• Wp Vr 8
• Product Feed Manager 5
• Wp Vr – 360 Panorama And Free Virtual Tour Builder For Wordpress 2

Newest

• rextheme product feed manager WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability CVE-2026-118089 7.2 HighOctober 30, 2026
• rextheme product feed manager WordPress Product Feed Manager plugin <= 7.14.1 - Broken Access Control vulnerability CVE-2026-118093 5.3 MediumOctober 29, 2026
• rextheme wp vr WordPress WP VR plugin <= 9.1.3 - Broken Access Control vulnerability CVE-2026-104386 6.5 MediumOctober 5, 2026
• rextheme product feed manager WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability CVE-2026-66580 8.5 HighSeptember 17, 2026
• rextheme product feed manager WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-59553 7.1 HighJuly 27, 2026
• rextheme product feed manager for woocommerce – sell on 200+ online marketplaces Product Feed Manager For WooCommerce <= 7.6.1 - Reflected Cross-Site Scripting via 's' Search Parameter CVE-2026-15306 6.1 MediumJuly 16, 2026
• rextheme cart lift WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability CVE-2026-57417 7.1 HighJuly 13, 2026
• rextheme wp vr WordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerability CVE-2025-62885 6.5 MediumOctober 27, 2025
• rextheme wp vr – 360 panorama and free virtual tour builder for wordpress WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.41 - Improper Authorization to Authenticated (Contributor+) Plugin Settings Update CVE-2025-12005 4.3 MediumOctober 25, 2025
• rextheme wp vr – 360 panorama and free virtual tour builder for wordpress, wp vr +1 more WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-6350 6.4 MediumJune 28, 2025
• rextheme wp vr WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability CVE-2025-47452 9.9 CriticalJune 17, 2025
• rextheme wp vr WordPress WP VR plugin <= 8.5.14 - Cross Site Scripting (XSS) vulnerability CVE-2025-24730 6.5 MediumJanuary 24, 2025
• rextheme change woocommerce add to cart button text WordPress Change WooCommerce Add To Cart Button Text plugin <= 1.3 - Broken Access Control vulnerability CVE-2023-34376 5.4 MediumDecember 13, 2024
• rextheme wp vr WordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerability CVE-2024-49680 4.3 MediumNovember 19, 2024
• rextheme wp vr WordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerability CVE-2024-49293 4.3 MediumOctober 21, 2024
• rextheme product feed manager WordPress Product Feed Manager plugin <= 7.3.15 - Directory Traversal vulnerability CVE-2023-52144 5.5 MediumApril 15, 2024
• rextheme wp vr WP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSS CVE-2023-6529 6.1 MediumJanuary 8, 2024
• rextheme wp vr WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-40663 7.1 HighSeptember 27, 2023
• rextheme cart lift – abandoned cart recovery for woocommerce and edd, cart lift - abandoned cart recovery for woocommerce and edd +1 more WordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS) CVE-2022-47449 7.1 HighMay 4, 2023
• rextheme wp vr WP VR < 8.3.0 - Subscriber+ Arbitrary Tour Update CVE-2023-1414 4.3 MediumApril 24, 2023
• rextheme wp vr WP VR < 8.2.9 - Reflected XSS CVE-2023-1413 6.1 MediumApril 17, 2023
• rextheme wp vr – 360 panorama and virtual tour builder for wordpress, wp vr +1 more WordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin <= 8.2.7 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25708 4.3 MediumMarch 15, 2023
• rextheme wp vr WP VR < 8.2.7 - Contributor+ Stored XSS CVE-2023-0174 5.4 MediumFebruary 6, 2023