CVE-2024-49293

Description

References

• patchstack.com/database/Wordpress/Plugin/wpvr/vulnerability/wordpress-wp-vr-plugin-8-5-4-broken-access-control-vulnerability

Altre vulnerabilità di wp vr

• CVE-2025-6350MEDIO 5.4The WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t…
• CVE-2023-6529MEDIO 6.1The WP VR WordPress plugin before 8.3.15 does not authorisation and CSRF in a function hooked to admin_init, allowing unauthenticated users …
• CVE-2023-40663MEDIO 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rextheme WP VR plugin <= 8.3.4 versions.
• CVE-2023-1414MEDIO 4.3The WP VR WordPress plugin before 8.3.0 does not have authorisation and CSRF checks in various AJAX actions, one in particular could allow a…
• CVE-2023-1413MEDIO 6.1The WP VR WordPress plugin before 8.2.9 does not sanitise and escape some parameters before outputting them back in the page, leading to a R…