https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T23:51:23.682485+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-114741 fkie_cve-2026-114741 2026-10-25T23:51:23.699607+00:00

The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and modify tours created by other users.

 https://db.gcve.eu/vuln/ghsa-vqjh-3q2x-jp9r GHSA-vqjh-3q2x-jp9r 2026-10-25T23:51:23.699675+00:00

The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and modify tours created by other users.