Read the docs

Ipanorama 360 Wordpress Virtual Tour Builder Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Ipanorama 360 Wordpress Virtual Tour Builder Project records in CISA KEV

No Ipanorama 360 Wordpress Virtual Tour Builder Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ipanorama 360 Wordpress Virtual Tour Builder 2 records MEDIUM

Records

2 records

TI-2022-04020 CVE-2022-4392 · GHSA-rx6f-437m-82px

iPanorama 360 WordPress Virtual Tour Builder <= 1.6.29 - Contributor+ Stored XSS

Priority MEDIUM 58

The iPanorama 360 WordPress Virtual Tour Builder plugin through 1.6.29 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even w…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-09 No fix listed
TI-2023-04909 CVE-2023-5336 · GHSA-f35c-gw68-7hgr

iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode

Priority MEDIUM 41

The iPanorama 360 – WordPress Virtual Tour Builder plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 1.8.0 due to insufficient escaping on the user supplied…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00802 Published 2023-10-19 No fix listed CWE-89
Open these records in search →