Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Maurice Clear all filters
TI-2024-20283 CVE-2024-30559 · GHSA-jq43-698p-9gcv

WordPress Spin 360 deg and 3D Model Viewer plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maurice Spin 360 deg and 3D Model Viewer allows Stored XSS.This issue affects Spin 360 deg and 3D Model Viewer: from n…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0034 Published 2024-03-31 No fix listed CWE-79
TI-2023-04765 CVE-2023-5177 · GHSA-fc5f-gc6j-gfhf

Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure

Priority MEDIUM 63

The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 exposes the full path of a file when putting in a non-existent file in a parameter of the shortcode.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00658 Published 2023-10-16 No fix listed