Plugin icon

WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress

wpvr

Vulnerabilities:

14

Last Updated:

March 27, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-10-24
Title
WP VR < 8.5.42 - Contributor+ Plugin Settings Update
Fixed in
Fixed in 8.5.42
CVSS
2.7 (low)
Published
2025-06-27
Title
WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress < 8.5.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.5.33
CVSS
6.4 (medium)
Published
2025-06-27
Title
VR < 8.5.49 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.5.49
CVSS
6.4 (medium)
Published
2025-06-12
Title
WP VR < 8.5.27 - Authenticated (Contributor+) Arbitrary File Upload
Fixed in
Fixed in 8.5.27
CVSS
8.8 (high)
Published
2025-01-24
Title
WP VR < 8.5.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.5.15
CVSS
6.4 (medium)
Published
2024-10-21
Title
WP VR < 8.5.6 - Missing Authorization
Fixed in
Fixed in 8.5.6
CVSS
4.3 (medium)
Published
2024-10-15
Title
WP VR < 8.5.5 - Missing Authorization
Fixed in
Fixed in 8.5.5
CVSS
4.3 (medium)
Published
2023-12-14
Title
WP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSS
Fixed in
Fixed in 8.3.15
CVSS
8.8 (high)
Published
2023-08-18
Title
WP VR < 8.3.5 - Reflected XSS
Fixed in
Fixed in 8.3.5
CVSS
7.1 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.0.2
CVSS
6.1 (medium)
Published
2023-03-29
Title
WP VR < 8.3.0 - Subscriber+ Arbitrary Tour Update
Fixed in
Fixed in 8.3.0
CVSS
4.3 (medium)
Published
2023-03-22
Title
WP VR < 8.2.9 - Reflected XSS
Fixed in
Fixed in 8.2.9
CVSS
7.5 (high)
Published
2023-02-14
Title
WP VR < 8.2.8 - Subscriber+ Settings Update
Fixed in
Fixed in 8.2.8
CVSS
4.3 (medium)
Published
2023-01-12
Title
WP VR < 8.2.7 - Contributor+ Stored XSS
Fixed in
Fixed in 8.2.7
CVSS
6.8 (medium)