Not rated
CVE-2023-4311 The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 is vulnerable to arbitrary file upload due to insufficient…
Description
The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 is vulnerable to arbitrary file upload due to insufficient checks in a plugin shortcode.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Vrm 360 3D Model Viewer 1.2 | earliest → 1.2.1 | No fix stated |