VP
Product
Verge3D Publishing and E-Commerce
3
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Verge3D Publishing and E-Commerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92994 | 8.8 | Sep 30 | Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API Affected: before 4.13.1 |
| CVE-2026-92996 | 5.3 | Sep 28 | Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done Affected: 4.1.0 through 4.13.0 |
| CVE-2026-92995 | 5.3 | Sep 27 | Verge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file Affected: through 4.13.0 |
Showing 3