Medium · 4.3 CVE-2023-25708 EUVD-2023-29618GHSA-x8xh-hfg5-qrf9

WordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin <= 8.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

Published Mar 15, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Rextheme WP VR – 360 Panorama and Virtual Tour Builder For WordPress plugin <= 8.2.7 versions.

Vendor	Product	Affected	Fixed
Rextheme	WP VR – 360 Panorama and Virtual Tour Builder For WordPress	≤ 8.2.7	—