Medium - CVE-2025-6350 - The WP VR – 360 Panorama and Free Virtual Tour...
The WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hotspot-hover’ parameter in all versions up to, and...
High - CVE-2025-6379 - The BeeTeam368 Extensions Pro plugin for...
The BeeTeam368 Extensions Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_live_fn() function. This makes it possible for...
High - CVE-2025-6381 - The BeeTeam368 Extensions plugin for WordPress...
The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_remove_temp_file() function. This makes it possible...
Medium - CVE-2025-6252 - The Qi Addons For Elementor plugin for...
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 1.9.1 due to insufficient input...