| CVE-2023-6529 |
The WP VR WordPress plugin before 8.3.15 does not authorisation and CSRF in a function hooked to admin_init, allowing…
|
6.1
Medium
|
Jan 8, 2024 |
| CVE-2023-1414 |
The WP VR WordPress plugin before 8.3.0 does not have authorisation and CSRF checks in various AJAX actions, one in…
|
4.3
Medium
|
Apr 24, 2023 |
| CVE-2023-1413 |
The WP VR WordPress plugin before 8.2.9 does not sanitise and escape some parameters before outputting them back in…
|
6.1
Medium
|
Apr 17, 2023 |
| CVE-2023-0174 |
The WP VR WordPress plugin before 8.2.7 does not validate and escape some of its shortcode attributes before…
|
5.4
Medium
|
Feb 6, 2023 |