Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Soft8Soft LLC Component: Verge3d Clear all filters
TI-2023-28075 CVE-2023-51421 · GHSA-m4vm-4pp6-pqj9

WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload

Priority MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00594 Published 2023-12-29 No fix listed CWE-434
TI-2023-28074 CVE-2023-51420 · GHSA-jjxg-ww3w-m6hq

WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Remote Code Execution (RCE)

Priority MEDIUM 42

Improper Control of Generation of Code ('Code Injection') vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00579 Published 2023-12-29 No fix listed CWE-94