WordPress security by component

WP3D Model Import Viewer

Plugin description

WP3D Model Import Viewer is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 13, 2025; the highest CVE/CNA score is 8.8.

Plugin slug: wp3d-model-import-block

Latest vulnerability

CVE-2025-13094: WP3D Model Import Viewer: Dangerous file upload

WP3D Model Import Viewer is affected by dangerous file upload. Exploitation requires at least author-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedDec 13, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 13, 2025	CVE-2025-13094 WP3D Model Import Viewer: Dangerous file upload WP3D Model Import Viewer is affected by dangerous file upload. Exploitation requires at least author-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE8.8 NVDPending