Log in Start free

RexTheme

Products

ProductCVEsExploitedLatest
WP VR6–Oct 27, 2025
Product Feed Manager4–Oct 30, 2026
WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress2–Oct 25, 2025
Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces1–Jul 16, 2026
Cart Lift1–Jul 13, 2026
WP VR – 360 Panorama and Virtual Tour Builder For WordPress1–Mar 15, 2023
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD1–May 4, 2023
Change WooCommerce Add To Cart Button Text1–Dec 13, 2024

Exploited and recent CVEs

  • CVE-2026-118089 High 7.2 WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-66580 High 8.5 WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability 0.4%
  • CVE-2026-59553 High 7.1 WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-15306 Medium 6.1 Product Feed Manager For WooCommerce <= 7.6.1 - Reflected Cross-Site Scripting via 's' Search Parameter 0.4%
  • CVE-2026-57417 High 7.1 WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-62885 Medium 6.5 WordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-12005 Medium 4.3 WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.41 - Improper Authorization to Authenticated (Contributor+) Plugin Settings Update 0.2%
  • CVE-2025-6350 Medium 6.4 WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-47452 Critical 9.9 WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability 0.5%
  • CVE-2025-24730 Medium 6.5 WordPress WP VR plugin <= 8.5.14 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-34376 Medium 5.4 WordPress Change WooCommerce Add To Cart Button Text plugin <= 1.3 - Broken Access Control vulnerability 0.5%
  • CVE-2024-49680 Medium 4.3 WordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerability 0.4%
  • CVE-2024-49293 Medium 4.3 WordPress WP VR plugin <= 8.5.4 - Broken Access Control vulnerability 0.3%
  • CVE-2023-52144 Medium 5.5 WordPress Product Feed Manager plugin <= 7.3.15 - Directory Traversal vulnerability 0.4%
  • CVE-2023-40663 High 7.1 WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-47449 High 7.1 WordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-25708 Medium 4.3 WordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin <= 8.2.7 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%