Vulnerabilities / WP VR
WP VR vulnerabilities
Advisories WPSec published for WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress. Other sources may list more. Its attack surface: WP VR on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0927 | WP VR <= 9.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via Scene Image URL | Medium 5.4 | 9.3.0 |
License: CC BY 4.0