CVE-2023-25708

Cross-Site Request Forgery (CSRF) vulnerability in Rextheme WP VR – 360 Panorama and Virtual Tour Builder For WordPress plugin <= 8.2.7 versions.

Score

CVSS 3.1 8.8 High

Status

Modified - audit@patchstack.com

Published

2023-03-15

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Wp Vr (Rextheme)
• Wp Vr 360 Panorama And Virtual Tour Builder For Wordpress (Rextheme)

References

• https://patchstack.com/database/vulnerability/wpvr/wordpress-wp-vr-360-panorama-and-virtual-tour-builder-plugin-8-2-7-c…