Soft8Soft LLC

Products

ProductCVEsExploitedLatest
Verge3D5–Jun 6, 2025
Verge3D Publishing and E-Commerce2–Dec 29, 2023

Exploited and recent CVEs

  • CVE-2025-49268 Medium 5.3 WordPress Verge3D plugin <= 4.9.4 - Broken Access Control Vulnerability 0.4%
  • CVE-2025-48241 High 7.1 WordPress Verge3D plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-39443 Medium 4.3 WordPress Verge3D plugin <= 4.9.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-30833 Medium 4.3 WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-22709 High 7.1 WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-51421 Critical 9.9 WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload 0.6%
  • CVE-2023-51420 Critical 9.1 WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Remote Code Execution (RCE) 0.6%