Skip to content
OpenAdvisories

Vendor

RexTheme

17 known vulnerabilities.

Products

WP VR 6 Product Feed Manager 4 WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress 2 Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD 1 WP VR – 360 Panorama and Virtual Tour Builder For WordPress 1 Cart Lift 1 Change WooCommerce Add To Cart Button Text 1 Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.2
    CVE-2026-118089

    WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability

    Shop manager PHP Object Injection in Product Feed Manager <= 7.14.1 versions.

    RexTheme Product Feed Manager
  • High 8.5
    CVE-2026-66580

    WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability

    Contributor SQL Injection in Product Feed Manager <= 7.12.0 versions.

    RexTheme Product Feed Manager
  • High 7.1
    CVE-2026-59553

    WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions.

    RexTheme Product Feed Manager
  • High 7.1
    CVE-2026-57417

    WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift cart-lift allows Stored XSS.This issue affects Cart Lift: from n/a through <= 3.1.57.

    RexTheme Cart Lift
  • High 7.1
    CVE-2023-40663

    WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rextheme WP VR plugin <= 8.3.4 versions.

    RexTheme WP VR
  • High 7.1
    CVE-2022-47449

    WordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD plugin <= 3.1.5 versions.

    RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Web / CMS