What’s Vulnerable › Products

Verge3D Publishing and E-Commerce vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Verge3D Publishing and E-Commerce version is affected

Latest Verge3D Publishing and E-Commerce vulnerabilities

• CVE-2026-92994 — Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API (CVSS 8.8)
• CVE-2026-92996 — Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done (CVSS 5.3)
• CVE-2026-92995 — Verge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file (CVSS 5.3)