| CVE-2026-114740 |
The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a tour through its…
|
4.9
Medium
|
Oct 25, 2026 |
| CVE-2026-114741 |
The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating…
|
3.8
Low
|
Oct 25, 2026 |
| CVE-2026-114742 |
The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours,…
|
2.7
Low
|
Oct 25, 2026 |
| CVE-2026-114429 |
The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before…
|
6.8
Medium
|
Oct 24, 2026 |