cleantalk
Vulnerabilities and Security Researches

WP VR – 360 Panorama and Virtual Tour Builder For WordPress, CVE-2025-47452

CVE, Research URL

CVE-2025-47452

Published on
Jun 17, 2025
Research Description
Unrestricted Upload of File with Dangerous Type vulnerability in RexTheme WP VR allows Upload a Web Shell to a Web Server. This issue affects WP VR: from n/a through 8.5.26.
Affected versions
Min -, max 8.5.27.
Status
vulnerable