WordPress security by component
Vrm 360 3D Model Viewer
Plugin description
Vrm 360 3D Model Viewer is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Dec 18, 2023; the highest CVE/CNA score is 8.8.
Plugin slug:
vrm360Latest vulnerability
CVE-2023-4311: Vrm 360 3D Model Viewer: Dangerous file upload
Vrm 360 3D Model Viewer is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
| Safe version |
|
||
|---|---|---|---|
| Dec 18, 2023 |
CVE-2023-4311
Vrm 360 3D Model Viewer: Dangerous file upload
Vrm 360 3D Model Viewer is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE8.8
NVD8.8
|
| Oct 16, 2023 |
CVE-2023-5177
Vrm 360 3D Model Viewer: A security weakness
Vrm 360 3D Model Viewer is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVD5.3
|