| CVE-2026-114740 |
The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a tour through its…
|
4.9
Moyenne
|
25 oct. 2026 |
| CVE-2026-114741 |
The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating…
|
3.8
Faible
|
25 oct. 2026 |
| CVE-2026-114742 |
The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours,…
|
2.7
Faible
|
25 oct. 2026 |
| CVE-2026-114429 |
The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before…
|
6.8
Moyenne
|
24 oct. 2026 |