VendorsRexThemewp_vrall versions
Vulnerabilities

RexTheme WP VR

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2023-25708
WordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin <= 8.2.7 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-03-15 · Modified
8.8EPSS 0.003
CVE-2023-40663
WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)
Published 2023-09-27 · Modified
7.1EPSS 0.004
CVE-2025-6350
WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2025-06-28 · Analyzed
6.4EPSS 0.002
CVE-2023-1413
WP VR < 8.2.9 - Reflected XSS
Published 2023-04-17 · Modified
6.1EPSS 0.005
CVE-2023-6529
WP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSS
Published 2024-01-08 · Modified
6.1EPSS 0.002
CVE-2023-0174
WP VR < 8.2.7 - Contributor+ Stored XSS
Published 2023-02-06 · Modified
5.4EPSS 0.006
CVE-2024-49293
WordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerability
Published 2024-10-21 · Modified
5.4EPSS 0.003
CVE-2023-1414
WP VR < 8.3.0 - Subscriber+ Arbitrary Tour Update
Published 2023-04-24 · Modified
4.3EPSS 0.002