expivi

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

expivi records in CISA KEV

No expivi vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70238 CVE-2026-103889 · GHSA-m7vx-2p8f-r357

Remote code execution in 3D Product configurator for WooCommerce

MEDIUM 51

The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01011 Published 2026-10-10 No fix listed CWE-434

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0