Unknown Verge3D Publishing and E-Commerce

3 known vulnerabilities in Unknown Verge3D Publishing and E-Commerce, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-92994 CVSS 8.8 high The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file…
  • CVE-2026-92996 CVSS 5.3 medium The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and…
  • CVE-2026-92995 CVSS 5.3 medium The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handler, allowing…