Vulnerabilities in rextheme
15 resultsVexday analysis
A Rextheme apresenta um perfil de risco reduzido com apenas 3 vulnerabilidades registradas, nenhuma delas sob exploração ativa conhecida ou com severidade crítica. A fraqueza predominante é Cross-Site Scripting (CWE-79), padrão em produtos web, com 1 vulnerabilidade divulgada nos últimos 90 dias indicando atividade recente mas controlada.
CVE-2023-34376MEDIUMWordPress Change WooCommerce Add To Cart Button Text plugin <= 1.3 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2025-47452CRITICALWordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload VulnerabilityEPSS 0.4%CVE-2023-52144MEDIUMWordPress Product Feed Manager plugin <= 7.3.15 - Directory Traversal vulnerabilityEPSS 0.4%CVE-2024-49680MEDIUMWordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2022-47449HIGHWordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-40663HIGHWordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2025-24730MEDIUMWordPress WP VR plugin <= 8.5.14 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-49293MEDIUMWordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-25708MEDIUMWordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin <= 8.2.7 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-12005MEDIUMWP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.41 - Improper Authorization to Authenticated (Contributor+) Plugin Settings UpdateEPSS 0.2%CVE-2026-15306MEDIUMProduct Feed Manager For WooCommerce <= 7.6.1 - Reflected Cross-Site Scripting via 's' Search ParameterEPSS 0.2%CVE-2025-6350MEDIUMWP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-62885MEDIUMWordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-59553HIGHWordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57417HIGHWordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%