What’s Vulnerable › Products

Soft8Soft LLC Verge3D vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Soft8Soft LLC Verge3D version is affected

Latest Soft8Soft LLC Verge3D vulnerabilities

• CVE-2025-49268 — WordPress Verge3D plugin <= 4.9.4 - Broken Access Control Vulnerability (CVSS 5.3)
• CVE-2025-48241 — WordPress Verge3D plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-39443 — WordPress Verge3D plugin <= 4.9.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2025-30833 — WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2025-22709 — WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2023-51421 — WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload (CVSS 8.8)
• CVE-2023-51420 — WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Remote Code Execution (RCE) (CVSS 8.8)