Skip to contentSoft8soft Llc Verge3d vulnerabilities
- soft8soft llc verge3d publishing and e-commerceVerge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage APICVE-2026-929948.8 High
- soft8soft llc verge3d publishing and e-commerceVerge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_doneCVE-2026-929965.3 Medium
- soft8soft llc verge3d publishing and e-commerceVerge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_fileCVE-2026-929955.3 Medium
- soft8soft llc verge3dWordPress Verge3D plugin <= 4.9.4 - Broken Access Control VulnerabilityCVE-2025-492685.3 Medium
- soft8soft llc verge3dWordPress Verge3D plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-482417.1 High
- soft8soft llc verge3dWordPress Verge3D plugin <= 4.9.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-394434.3 Medium
- soft8soft llc verge3dWordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-308334.3 Medium
- soft8soft llc verge3dWordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-227097.1 High
- soft8soft verge3d, soft8soft llc verge3d publishing and e-commerce +1 moreWordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File UploadCVE-2023-514219.9 Critical
- soft8soft verge3d, soft8soft llc verge3d publishing and e-commerce +1 moreWordPress Verge3D Plugin <= 4.5.2 is vulnerable to Remote Code Execution (RCE)CVE-2023-514209.1 Critical