WordPress Verge3D Publishing and E-Commerce plugin < 4.13.1 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Raphael P. Cigana in WordPress Plugin Verge3D versions 4.13.1...

CVE-2026-92994

The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...

CVE-2026-92994

The Verge3D Publishing and E-Commerce WordPress plugin before version 4.13.1 is vulnerable to unauthenticated Stored XSS . The flaw exists because the plugin's file storage feature fails to validate the contents of uploaded files and serves them back with an attacker-controlled content type. This...

CVE-2026-92994 Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API

The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...

CVE-2026-92994 Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API

The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...

EUVD-2026-89622

The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...

PT-2026-103043

The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...

CVE-2026-92994: Improper Neutralization of Input During Web Page Generation

The Verge3D Publishing and E-Commerce WordPress plugin before 4.13.1 does not validate the contents of files uploaded through its file storage feature and serves them back with an attacker-controlled content type, allowing unauthenticated attackers to store a file containing malicious JavaScript...

WordPress Verge3D Publishing and E-Commerce plugin 4.1.0-4.13.0 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, Iñigo Sánchez Enciso in WordPress Plugin Verge3D versions 4.1.0-4.13.0...

WordPress Verge3D Publishing and E-Commerce plugin <= 4.13.0 - Unauthenticated Product Download Disclosure vulnerability

Unauthenticated Product Download Disclosure vulnerability discovered by Raphael P. Cigana in WordPress Plugin Verge3D versions = 4.13.0...

CVE-2026-92996

The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check order ownership, allowing unauthenticated users to mark any order as paid...

EUVD-2026-88102

The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check order ownership, allowing unauthenticated users to mark any order as paid...

CVE-2026-92996 Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done

The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check order ownership, allowing unauthenticated users to mark any order as paid...

CVE-2026-92996 Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done

The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check order ownership, allowing unauthenticated users to mark any order as paid...

CVE-2026-92996

The Verge3D WordPress plugin (versions 4.1.0 through 4.13.0 ) contains a vulnerability where it fails to verify payments with the payment provider and lacks order ownership checks. This allows unauthenticated users to mark any order as paid via the v3d_payment_done functionality. No specific reme...

PT-2026-99779

Name of the Vulnerable Software and Affected Versions Verge3D WordPress plugin versions 4.1.0 through 4.13.0 Description An issue exists where the plugin fails to verify payment status with the payment provider and does not validate order ownership. This allows unauthenticated users to mark any...

CVE-2026-92996: Insufficient Verification of Data Authenticity

The Verge3D WordPress plugin from 4.1.0 through 4.13.0 does not verify with the payment provider that a payment was actually made, and does not check order ownership, allowing unauthenticated users to mark any order as paid...

CVE-2026-92995

The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handler, allowing unauthenticated users to download the digital-goods files attached to any order without authorization...

CVE-2026-92995 Verge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file

The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handler, allowing unauthenticated users to download the digital-goods files attached to any order without authorization...

CVE-2026-92995 Verge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file

The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 does not restrict access to a file-download handler, allowing unauthenticated users to download the digital-goods files attached to any order without authorization...