Soft8soft Llc vulnerabilities

Products

• Verge3d 5
• Verge3d Publishing And E-commerce 5

Newest

• soft8soft llc verge3d publishing and e-commerce Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API CVE-2026-92994 8.8 HighSeptember 30, 2026
• soft8soft llc verge3d publishing and e-commerce Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done CVE-2026-92996 5.3 MediumSeptember 28, 2026
• soft8soft llc verge3d publishing and e-commerce Verge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file CVE-2026-92995 5.3 MediumSeptember 27, 2026
• soft8soft llc verge3d WordPress Verge3D plugin <= 4.9.4 - Broken Access Control Vulnerability CVE-2025-49268 5.3 MediumJune 6, 2025
• soft8soft llc verge3d WordPress Verge3D plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-48241 7.1 HighMay 23, 2025
• soft8soft llc verge3d WordPress Verge3D plugin <= 4.9.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-39443 4.3 MediumApril 17, 2025
• soft8soft llc verge3d WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-30833 4.3 MediumMarch 27, 2025
• soft8soft llc verge3d WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-22709 7.1 HighJanuary 21, 2025
• soft8soft verge3d, soft8soft llc verge3d publishing and e-commerce +1 more WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload CVE-2023-51421 9.9 CriticalDecember 29, 2023
• soft8soft verge3d, soft8soft llc verge3d publishing and e-commerce +1 more WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Remote Code Execution (RCE) CVE-2023-51420 9.1 CriticalDecember 29, 2023