Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-40729 EUVD-2026-22885GHSA-8f3x-4qgm-mmjv

WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerability

Published Apr 15, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in bPlugins 3D viewer – Embed 3D Models 3d-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D viewer – Embed 3D Models: from n/a through <= 1.8.5.

Affected products

VendorProductAffectedFixed
bPlugins 3D viewer – Embed 3D Models ≤ 1.8.5 —

References