wp3d

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

wp3d records in CISA KEV

No wp3d vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-11978 CVE-2025-13094 · GHSA-gr9h-v5g5-5p6g

WP3D Model Import Viewer <= 1.0.7 - Authenticated (Contributor+) Arbitrary File Upload

MEDIUM 41

The WP3D Model Import Viewer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_import_file() function in all versions up to, and including, 1.0.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00504 Published 2025-12-13 No fix listed CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0