WP
Product
WPVR
by · last CVE Oct 25, 2026
4
CVEs
0
On KEV
6.8
Max CVSS
4
New 30D
Severity mix
Critical 0High 0Medium 2Low 2
Watch

Add WPVR to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114429
New
6.8
0%
Oct 24
WP VR 8.5.49 - 9.0.2 - Contributor+ Stored XSS via Hotspot Content
Affected: 8.5.49 before 9.0.3
CVE-2026-114740
New
4.9
0%
Oct 25
WP VR 8.5.55 - 9.1.2 - Contributor+ Arbitrary Tour Creation and Publishing via Setup Wizard
Affected: 8.5.55 before 9.1.3
CVE-2026-114741
New
3.8
0%
Oct 25
WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR
Affected: 9.0.0 before 9.0.3
CVE-2026-114742
New
2.7
0%
Oct 25
WP VR 8.3.0 - 9.0.2 - Contributor+ Arbitrary Tour Update via IDOR
Affected: 8.3.0 before 9.0.3
Showing 4