GCVE - cpe:2.3:a:rextheme:wp_vr:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:rextheme:wp_vr:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Rextheme (`fb4175f3-ed37-5cdd-87b9-706aaba4d37d`)
Product	Wp Vr (`bd3b3403-7dae-5360-b175-1ab300d4cc14`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-62885`	vulnerable	2026-06-08 07:39:16.974008	WordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme WP VR wpvr allows DOM-Based XSS.This issue affects WP VR: from n/a through <= 8.5.48. Published: 2025-10-27T01:33:44.357Z Updated: 2026-04-28T18:57:15.581Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wpvr/vulnerability/wordpress-wp-vr-plugin-8-5-42-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-47452`	vulnerable	2026-06-08 07:27:14.404126	WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability CRITICAL (9.9) Unrestricted Upload of File with Dangerous Type vulnerability in RexTheme WP VR wpvr allows Upload a Web Shell to a Web Server.This issue affects WP VR: from n/a through <= 8.5.26. Published: 2025-06-17T15:01:34.207Z Updated: 2026-04-28T16:12:40.908Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wpvr/vulnerability/wordpress-wp-vr-8-5-26-arbitrary-file-upload-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-24730`	vulnerable	2026-06-08 07:12:49.799432	WordPress WP VR plugin <= 8.5.14 - Cross Site Scripting (XSS) vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme WP VR wpvr allows DOM-Based XSS.This issue affects WP VR: from n/a through <= 8.5.14. Published: 2025-01-24T17:25:15.296Z Updated: 2026-05-12T23:48:07.470Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wpvr/vulnerability/wordpress-wp-vr-plugin-8-5-14-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-49680`	vulnerable	2026-06-08 06:50:14.502809	WordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerability MEDIUM (4.3) Missing Authorization vulnerability in RexTheme WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through <= 8.5.5. Published: 2024-11-19T16:30:40.691Z Updated: 2026-04-28T16:10:27.392Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wpvr/vulnerability/wordpress-wpvr-plugin-8-5-5-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-49293`	vulnerable	2026-06-08 06:50:13.380476	WordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerability MEDIUM (4.3) Missing Authorization vulnerability in RexTheme WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through <= 8.5.4. Published: 2024-10-21T11:12:20.813Z Updated: 2026-05-11T21:14:19.799Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wpvr/vulnerability/wordpress-wp-vr-plugin-8-5-4-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40663`	vulnerable	2026-06-08 06:11:04.166690	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.