Skip to contentRextheme Wp Vr vulnerabilities
- rextheme wp vrWordPress WP VR plugin <= 9.1.3 - Broken Access Control vulnerabilityCVE-2026-1043866.5 Medium
- rextheme wp vrWordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-628856.5 Medium
- rextheme wp vr – 360 panorama and free virtual tour builder for wordpressWP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.41 - Improper Authorization to Authenticated (Contributor+) Plugin Settings UpdateCVE-2025-120054.3 Medium
- rextheme wp vr – 360 panorama and free virtual tour builder for wordpress, wp vr +1 moreWP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-63506.4 Medium
- rextheme wp vrWordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload VulnerabilityCVE-2025-474529.9 Critical
- rextheme wp vrWordPress WP VR plugin <= 8.5.14 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-247306.5 Medium
- rextheme wp vrWordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerabilityCVE-2024-496804.3 Medium
- rextheme wp vrWordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerabilityCVE-2024-492934.3 Medium
- rextheme wp vrWP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSSCVE-2023-65296.1 Medium
- rextheme wp vrWordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-406637.1 High
- rextheme wp vrWP VR < 8.3.0 - Subscriber+ Arbitrary Tour UpdateCVE-2023-14144.3 Medium
- rextheme wp vrWP VR < 8.2.9 - Reflected XSSCVE-2023-14136.1 Medium
- rextheme wp vr – 360 panorama and virtual tour builder for wordpress, wp vr +1 moreWordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin <= 8.2.7 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-257084.3 Medium
- rextheme wp vrWP VR < 8.2.7 - Contributor+ Stored XSSCVE-2023-01745.4 Medium