Unknown Verge3D Publishing and E-Commerce

• CVE-2026-92994 High 8.8 Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API 0.3%
• CVE-2026-92996 Medium 5.3 Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done 0.1%
• CVE-2026-92995 Medium 5.3 Verge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file 0.2%