RexTheme vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20244
3. 20255
4. 20265

Newest CVEs

• CVE-2026-118089

  WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability

  RexTheme · Product Feed Manager

  High7.2
• CVE-2026-66580

  WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability

  RexTheme · Product Feed Manager

  High8.5
• CVE-2026-59553

  WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability

  RexTheme · Product Feed Manager

  High7.1
• CVE-2026-15306

  Product Feed Manager For WooCommerce <= 7.6.1 - Reflected Cross-Site Scripting via 's' Search Parameter

  rextheme · Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces

  Medium6.1
• CVE-2026-57417

  WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability

  RexTheme · Cart Lift

  High7.1
• CVE-2025-62885

  WordPress WP VR plugin <= 8.5.48 - Cross Site Scripting (XSS) vulnerability

  RexTheme · WP VR

  Medium6.5
• CVE-2025-12005

  WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.41 - Improper Authorization to Authenticated (Contributor+) Plugin Settings Update

  rextheme · WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress

  Medium4.3
• CVE-2025-6350

  WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting

  rextheme · WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress

  Medium6.4
• CVE-2025-47452

  WordPress WP VR plugin <= 8.5.26 - Arbitrary File Upload Vulnerability

  RexTheme · WP VR

  Critical9.9
• CVE-2025-24730

  WordPress WP VR plugin <= 8.5.14 - Cross Site Scripting (XSS) vulnerability

  RexTheme · WP VR

  Medium6.5