Soft8Soft LLC
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Verge3D | 5 | – | Jun 6, 2025 |
| Verge3D Publishing and E-Commerce | 2 | – | Dec 29, 2023 |
Exploited and recent CVEs
- CVE-2025-49268 WordPress Verge3D plugin <= 4.9.4 - Broken Access Control Vulnerability 0.4%
- CVE-2025-48241 WordPress Verge3D plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-39443 WordPress Verge3D plugin <= 4.9.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2025-30833 WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2025-22709 WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2023-51421 WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload 0.6%
- CVE-2023-51420 WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Remote Code Execution (RCE) 0.6%