CVE-2023-40663

Description

References

• patchstack.com/database/vulnerability/wpvr/wordpress-wp-vr-plugin-8-3-4-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory

Weitere Schwachstellen in wp vr

• CVE-2025-6350MITTEL 5.4The WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t…
• CVE-2024-49293MITTEL 5.4Missing Authorization vulnerability in RexTheme WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…
• CVE-2023-6529MITTEL 6.1The WP VR WordPress plugin before 8.3.15 does not authorisation and CSRF in a function hooked to admin_init, allowing unauthenticated users …
• CVE-2023-1414MITTEL 4.3The WP VR WordPress plugin before 8.3.0 does not have authorisation and CSRF checks in various AJAX actions, one in particular could allow a…
• CVE-2023-1413MITTEL 6.1The WP VR WordPress plugin before 8.2.9 does not sanitise and escape some parameters before outputting them back in the page, leading to a R…