Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-6350

The WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hotspot-hover’ parameter in all versions up to, and including, 8.5.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.4%
CVSS Severity
CVSS v3 Score 6.4
Products affected by CVE-2025-6350
  • Rextheme » Wp Vr » Version: N/A
    cpe:2.3:a:rextheme:wp_vr:-
  • Rextheme » Wp Vr » Version: 1.0
    cpe:2.3:a:rextheme:wp_vr:1.0
  • Rextheme » Wp Vr » Version: 1.0.1
    cpe:2.3:a:rextheme:wp_vr:1.0.1
  • Rextheme » Wp Vr » Version: 1.0.2
    cpe:2.3:a:rextheme:wp_vr:1.0.2
  • Rextheme » Wp Vr » Version: 2.0.0
    cpe:2.3:a:rextheme:wp_vr:2.0.0
  • Rextheme » Wp Vr » Version: 2.1.0
    cpe:2.3:a:rextheme:wp_vr:2.1.0
  • Rextheme » Wp Vr » Version: 2.1.1
    cpe:2.3:a:rextheme:wp_vr:2.1.1
  • Rextheme » Wp Vr » Version: 2.2.0
    cpe:2.3:a:rextheme:wp_vr:2.2.0
  • Rextheme » Wp Vr » Version: 2.3.0
    cpe:2.3:a:rextheme:wp_vr:2.3.0
  • Rextheme » Wp Vr » Version: 2.4.0
    cpe:2.3:a:rextheme:wp_vr:2.4.0
  • Rextheme » Wp Vr » Version: 2.5.0
    cpe:2.3:a:rextheme:wp_vr:2.5.0
  • Rextheme » Wp Vr » Version: 2.6.0
    cpe:2.3:a:rextheme:wp_vr:2.6.0
  • Rextheme » Wp Vr » Version: 2.7.0
    cpe:2.3:a:rextheme:wp_vr:2.7.0
  • Rextheme » Wp Vr » Version: 2.8.0
    cpe:2.3:a:rextheme:wp_vr:2.8.0
  • Rextheme » Wp Vr » Version: 2.9.0
    cpe:2.3:a:rextheme:wp_vr:2.9.0
  • Rextheme » Wp Vr » Version: 3.0.0
    cpe:2.3:a:rextheme:wp_vr:3.0.0
  • Rextheme » Wp Vr » Version: 3.1.0
    cpe:2.3:a:rextheme:wp_vr:3.1.0
  • Rextheme » Wp Vr » Version: 3.2.0
    cpe:2.3:a:rextheme:wp_vr:3.2.0
  • Rextheme » Wp Vr » Version: 3.3.0
    cpe:2.3:a:rextheme:wp_vr:3.3.0
  • Rextheme » Wp Vr » Version: 3.4.0
    cpe:2.3:a:rextheme:wp_vr:3.4.0
  • Rextheme » Wp Vr » Version: 3.4.1
    cpe:2.3:a:rextheme:wp_vr:3.4.1
  • Rextheme » Wp Vr » Version: 3.4.2
    cpe:2.3:a:rextheme:wp_vr:3.4.2
  • Rextheme » Wp Vr » Version: 3.4.3
    cpe:2.3:a:rextheme:wp_vr:3.4.3
  • Rextheme » Wp Vr » Version: 3.4.4
    cpe:2.3:a:rextheme:wp_vr:3.4.4
  • Rextheme » Wp Vr » Version: 3.4.5
    cpe:2.3:a:rextheme:wp_vr:3.4.5
  • Rextheme » Wp Vr » Version: 3.4.6
    cpe:2.3:a:rextheme:wp_vr:3.4.6
  • Rextheme » Wp Vr » Version: 3.4.7
    cpe:2.3:a:rextheme:wp_vr:3.4.7
  • Rextheme » Wp Vr » Version: 3.4.8
    cpe:2.3:a:rextheme:wp_vr:3.4.8
  • Rextheme » Wp Vr » Version: 3.4.9
    cpe:2.3:a:rextheme:wp_vr:3.4.9
  • Rextheme » Wp Vr » Version: 3.5.0
    cpe:2.3:a:rextheme:wp_vr:3.5.0
  • Rextheme » Wp Vr » Version: 3.6.0
    cpe:2.3:a:rextheme:wp_vr:3.6.0
  • Rextheme » Wp Vr » Version: 3.7.0
    cpe:2.3:a:rextheme:wp_vr:3.7.0
  • Rextheme » Wp Vr » Version: 3.8.0
    cpe:2.3:a:rextheme:wp_vr:3.8.0
  • Rextheme » Wp Vr » Version: 3.9.0
    cpe:2.3:a:rextheme:wp_vr:3.9.0
  • Rextheme » Wp Vr » Version: 4.0.0
    cpe:2.3:a:rextheme:wp_vr:4.0.0
  • Rextheme » Wp Vr » Version: 4.1.0
    cpe:2.3:a:rextheme:wp_vr:4.1.0
  • Rextheme » Wp Vr » Version: 4.2.0
    cpe:2.3:a:rextheme:wp_vr:4.2.0
  • Rextheme » Wp Vr » Version: 4.3.0
    cpe:2.3:a:rextheme:wp_vr:4.3.0
  • Rextheme » Wp Vr » Version: 4.4.0
    cpe:2.3:a:rextheme:wp_vr:4.4.0
  • Rextheme » Wp Vr » Version: 4.5.0
    cpe:2.3:a:rextheme:wp_vr:4.5.0
  • Rextheme » Wp Vr » Version: 4.6.0
    cpe:2.3:a:rextheme:wp_vr:4.6.0
  • Rextheme » Wp Vr » Version: 4.7.0
    cpe:2.3:a:rextheme:wp_vr:4.7.0
  • Rextheme » Wp Vr » Version: 4.8.0
    cpe:2.3:a:rextheme:wp_vr:4.8.0
  • Rextheme » Wp Vr » Version: 4.9.0
    cpe:2.3:a:rextheme:wp_vr:4.9.0
  • Rextheme » Wp Vr » Version: 5.0.0
    cpe:2.3:a:rextheme:wp_vr:5.0.0
  • Rextheme » Wp Vr » Version: 5.1.0
    cpe:2.3:a:rextheme:wp_vr:5.1.0
  • Rextheme » Wp Vr » Version: 5.2.0
    cpe:2.3:a:rextheme:wp_vr:5.2.0
  • Rextheme » Wp Vr » Version: 5.3.0
    cpe:2.3:a:rextheme:wp_vr:5.3.0
  • Rextheme » Wp Vr » Version: 5.4.0
    cpe:2.3:a:rextheme:wp_vr:5.4.0
  • Rextheme » Wp Vr » Version: 5.5.0
    cpe:2.3:a:rextheme:wp_vr:5.5.0
  • Rextheme » Wp Vr » Version: 5.6.0
    cpe:2.3:a:rextheme:wp_vr:5.6.0
  • Rextheme » Wp Vr » Version: 5.7.0
    cpe:2.3:a:rextheme:wp_vr:5.7.0
  • Rextheme » Wp Vr » Version: 5.8.0
    cpe:2.3:a:rextheme:wp_vr:5.8.0
  • Rextheme » Wp Vr » Version: 5.9.0
    cpe:2.3:a:rextheme:wp_vr:5.9.0
  • Rextheme » Wp Vr » Version: 6.0.0
    cpe:2.3:a:rextheme:wp_vr:6.0.0
  • Rextheme » Wp Vr » Version: 6.1.0
    cpe:2.3:a:rextheme:wp_vr:6.1.0
  • Rextheme » Wp Vr » Version: 6.2.0
    cpe:2.3:a:rextheme:wp_vr:6.2.0
  • Rextheme » Wp Vr » Version: 6.3.0
    cpe:2.3:a:rextheme:wp_vr:6.3.0
  • Rextheme » Wp Vr » Version: 6.4.0
    cpe:2.3:a:rextheme:wp_vr:6.4.0
  • Rextheme » Wp Vr » Version: 6.5.0
    cpe:2.3:a:rextheme:wp_vr:6.5.0
  • Rextheme » Wp Vr » Version: 6.6.0
    cpe:2.3:a:rextheme:wp_vr:6.6.0
  • Rextheme » Wp Vr » Version: 6.7.0
    cpe:2.3:a:rextheme:wp_vr:6.7.0
  • Rextheme » Wp Vr » Version: 6.8.0
    cpe:2.3:a:rextheme:wp_vr:6.8.0
  • Rextheme » Wp Vr » Version: 6.9.0
    cpe:2.3:a:rextheme:wp_vr:6.9.0
  • Rextheme » Wp Vr » Version: 7.0.0
    cpe:2.3:a:rextheme:wp_vr:7.0.0
  • Rextheme » Wp Vr » Version: 7.1.0
    cpe:2.3:a:rextheme:wp_vr:7.1.0
  • Rextheme » Wp Vr » Version: 7.2.0
    cpe:2.3:a:rextheme:wp_vr:7.2.0
  • Rextheme » Wp Vr » Version: 7.2.1
    cpe:2.3:a:rextheme:wp_vr:7.2.1
  • Rextheme » Wp Vr » Version: 7.2.2
    cpe:2.3:a:rextheme:wp_vr:7.2.2
  • Rextheme » Wp Vr » Version: 7.2.3
    cpe:2.3:a:rextheme:wp_vr:7.2.3
  • Rextheme » Wp Vr » Version: 7.2.4
    cpe:2.3:a:rextheme:wp_vr:7.2.4
  • Rextheme » Wp Vr » Version: 7.2.5
    cpe:2.3:a:rextheme:wp_vr:7.2.5
  • Rextheme » Wp Vr » Version: 7.2.6
    cpe:2.3:a:rextheme:wp_vr:7.2.6
  • Rextheme » Wp Vr » Version: 7.2.7
    cpe:2.3:a:rextheme:wp_vr:7.2.7
  • Rextheme » Wp Vr » Version: 7.2.8
    cpe:2.3:a:rextheme:wp_vr:7.2.8
  • Rextheme » Wp Vr » Version: 7.2.9
    cpe:2.3:a:rextheme:wp_vr:7.2.9
  • Rextheme » Wp Vr » Version: 7.3.0
    cpe:2.3:a:rextheme:wp_vr:7.3.0
  • Rextheme » Wp Vr » Version: 7.3.1
    cpe:2.3:a:rextheme:wp_vr:7.3.1
  • Rextheme » Wp Vr » Version: 7.3.10
    cpe:2.3:a:rextheme:wp_vr:7.3.10
  • Rextheme » Wp Vr » Version: 7.3.11
    cpe:2.3:a:rextheme:wp_vr:7.3.11
  • Rextheme » Wp Vr » Version: 7.3.2
    cpe:2.3:a:rextheme:wp_vr:7.3.2
  • Rextheme » Wp Vr » Version: 7.3.3
    cpe:2.3:a:rextheme:wp_vr:7.3.3
  • Rextheme » Wp Vr » Version: 7.3.4
    cpe:2.3:a:rextheme:wp_vr:7.3.4
  • Rextheme » Wp Vr » Version: 7.3.5
    cpe:2.3:a:rextheme:wp_vr:7.3.5
  • Rextheme » Wp Vr » Version: 7.3.6
    cpe:2.3:a:rextheme:wp_vr:7.3.6
  • Rextheme » Wp Vr » Version: 7.3.7
    cpe:2.3:a:rextheme:wp_vr:7.3.7
  • Rextheme » Wp Vr » Version: 7.3.8
    cpe:2.3:a:rextheme:wp_vr:7.3.8
  • Rextheme » Wp Vr » Version: 7.3.9
    cpe:2.3:a:rextheme:wp_vr:7.3.9
  • Rextheme » Wp Vr » Version: 8.0.0
    cpe:2.3:a:rextheme:wp_vr:8.0.0
  • Rextheme » Wp Vr » Version: 8.0.1
    cpe:2.3:a:rextheme:wp_vr:8.0.1
  • Rextheme » Wp Vr » Version: 8.0.2
    cpe:2.3:a:rextheme:wp_vr:8.0.2
  • Rextheme » Wp Vr » Version: 8.1.0
    cpe:2.3:a:rextheme:wp_vr:8.1.0
  • Rextheme » Wp Vr » Version: 8.1.1
    cpe:2.3:a:rextheme:wp_vr:8.1.1
  • Rextheme » Wp Vr » Version: 8.1.2
    cpe:2.3:a:rextheme:wp_vr:8.1.2
  • Rextheme » Wp Vr » Version: 8.2.0
    cpe:2.3:a:rextheme:wp_vr:8.2.0
  • Rextheme » Wp Vr » Version: 8.2.1
    cpe:2.3:a:rextheme:wp_vr:8.2.1
  • Rextheme » Wp Vr » Version: 8.2.2
    cpe:2.3:a:rextheme:wp_vr:8.2.2
  • Rextheme » Wp Vr » Version: 8.2.3
    cpe:2.3:a:rextheme:wp_vr:8.2.3
  • Rextheme » Wp Vr » Version: 8.2.4
    cpe:2.3:a:rextheme:wp_vr:8.2.4
  • Rextheme » Wp Vr » Version: 8.2.5
    cpe:2.3:a:rextheme:wp_vr:8.2.5
  • Rextheme » Wp Vr » Version: 8.2.6
    cpe:2.3:a:rextheme:wp_vr:8.2.6
  • Rextheme » Wp Vr » Version: 8.2.7
    cpe:2.3:a:rextheme:wp_vr:8.2.7
  • Rextheme » Wp Vr » Version: 8.2.8
    cpe:2.3:a:rextheme:wp_vr:8.2.8
  • Rextheme » Wp Vr » Version: 8.2.9
    cpe:2.3:a:rextheme:wp_vr:8.2.9
  • Rextheme » Wp Vr » Version: 8.3.0
    cpe:2.3:a:rextheme:wp_vr:8.3.0
  • Rextheme » Wp Vr » Version: 8.3.1
    cpe:2.3:a:rextheme:wp_vr:8.3.1
  • Rextheme » Wp Vr » Version: 8.3.10
    cpe:2.3:a:rextheme:wp_vr:8.3.10
  • Rextheme » Wp Vr » Version: 8.3.11
    cpe:2.3:a:rextheme:wp_vr:8.3.11
  • Rextheme » Wp Vr » Version: 8.3.12
    cpe:2.3:a:rextheme:wp_vr:8.3.12
  • Rextheme » Wp Vr » Version: 8.3.13
    cpe:2.3:a:rextheme:wp_vr:8.3.13
  • Rextheme » Wp Vr » Version: 8.3.14
    cpe:2.3:a:rextheme:wp_vr:8.3.14
  • Rextheme » Wp Vr » Version: 8.3.15
    cpe:2.3:a:rextheme:wp_vr:8.3.15
  • Rextheme » Wp Vr » Version: 8.3.16
    cpe:2.3:a:rextheme:wp_vr:8.3.16
  • Rextheme » Wp Vr » Version: 8.3.17
    cpe:2.3:a:rextheme:wp_vr:8.3.17
  • Rextheme » Wp Vr » Version: 8.3.18
    cpe:2.3:a:rextheme:wp_vr:8.3.18
  • Rextheme » Wp Vr » Version: 8.3.19
    cpe:2.3:a:rextheme:wp_vr:8.3.19
  • Rextheme » Wp Vr » Version: 8.3.2
    cpe:2.3:a:rextheme:wp_vr:8.3.2
  • Rextheme » Wp Vr » Version: 8.3.20
    cpe:2.3:a:rextheme:wp_vr:8.3.20
  • Rextheme » Wp Vr » Version: 8.3.3
    cpe:2.3:a:rextheme:wp_vr:8.3.3
  • Rextheme » Wp Vr » Version: 8.3.4
    cpe:2.3:a:rextheme:wp_vr:8.3.4
  • Rextheme » Wp Vr » Version: 8.3.5
    cpe:2.3:a:rextheme:wp_vr:8.3.5
  • Rextheme » Wp Vr » Version: 8.3.6
    cpe:2.3:a:rextheme:wp_vr:8.3.6
  • Rextheme » Wp Vr » Version: 8.3.7
    cpe:2.3:a:rextheme:wp_vr:8.3.7
  • Rextheme » Wp Vr » Version: 8.3.8
    cpe:2.3:a:rextheme:wp_vr:8.3.8
  • Rextheme » Wp Vr » Version: 8.3.9
    cpe:2.3:a:rextheme:wp_vr:8.3.9
  • Rextheme » Wp Vr » Version: 8.4.0
    cpe:2.3:a:rextheme:wp_vr:8.4.0
  • Rextheme » Wp Vr » Version: 8.4.1
    cpe:2.3:a:rextheme:wp_vr:8.4.1
  • Rextheme » Wp Vr » Version: 8.4.2
    cpe:2.3:a:rextheme:wp_vr:8.4.2
  • Rextheme » Wp Vr » Version: 8.4.3
    cpe:2.3:a:rextheme:wp_vr:8.4.3
  • Rextheme » Wp Vr » Version: 8.4.4
    cpe:2.3:a:rextheme:wp_vr:8.4.4
  • Rextheme » Wp Vr » Version: 8.4.5
    cpe:2.3:a:rextheme:wp_vr:8.4.5
  • Rextheme » Wp Vr » Version: 8.4.6
    cpe:2.3:a:rextheme:wp_vr:8.4.6
  • Rextheme » Wp Vr » Version: 8.4.7
    cpe:2.3:a:rextheme:wp_vr:8.4.7
  • Rextheme » Wp Vr » Version: 8.4.8
    cpe:2.3:a:rextheme:wp_vr:8.4.8
  • Rextheme » Wp Vr » Version: 8.4.9
    cpe:2.3:a:rextheme:wp_vr:8.4.9
  • Rextheme » Wp Vr » Version: 8.5.0
    cpe:2.3:a:rextheme:wp_vr:8.5.0
  • Rextheme » Wp Vr » Version: 8.5.1
    cpe:2.3:a:rextheme:wp_vr:8.5.1
  • Rextheme » Wp Vr » Version: 8.5.10
    cpe:2.3:a:rextheme:wp_vr:8.5.10
  • Rextheme » Wp Vr » Version: 8.5.11
    cpe:2.3:a:rextheme:wp_vr:8.5.11
  • Rextheme » Wp Vr » Version: 8.5.12
    cpe:2.3:a:rextheme:wp_vr:8.5.12
  • Rextheme » Wp Vr » Version: 8.5.13
    cpe:2.3:a:rextheme:wp_vr:8.5.13
  • Rextheme » Wp Vr » Version: 8.5.14
    cpe:2.3:a:rextheme:wp_vr:8.5.14
  • Rextheme » Wp Vr » Version: 8.5.15
    cpe:2.3:a:rextheme:wp_vr:8.5.15
  • Rextheme » Wp Vr » Version: 8.5.16
    cpe:2.3:a:rextheme:wp_vr:8.5.16
  • Rextheme » Wp Vr » Version: 8.5.17
    cpe:2.3:a:rextheme:wp_vr:8.5.17
  • Rextheme » Wp Vr » Version: 8.5.18
    cpe:2.3:a:rextheme:wp_vr:8.5.18
  • Rextheme » Wp Vr » Version: 8.5.19
    cpe:2.3:a:rextheme:wp_vr:8.5.19
  • Rextheme » Wp Vr » Version: 8.5.2
    cpe:2.3:a:rextheme:wp_vr:8.5.2
  • Rextheme » Wp Vr » Version: 8.5.20
    cpe:2.3:a:rextheme:wp_vr:8.5.20
  • Rextheme » Wp Vr » Version: 8.5.21
    cpe:2.3:a:rextheme:wp_vr:8.5.21
  • Rextheme » Wp Vr » Version: 8.5.22
    cpe:2.3:a:rextheme:wp_vr:8.5.22
  • Rextheme » Wp Vr » Version: 8.5.23
    cpe:2.3:a:rextheme:wp_vr:8.5.23
  • Rextheme » Wp Vr » Version: 8.5.24
    cpe:2.3:a:rextheme:wp_vr:8.5.24
  • Rextheme » Wp Vr » Version: 8.5.25
    cpe:2.3:a:rextheme:wp_vr:8.5.25
  • Rextheme » Wp Vr » Version: 8.5.26
    cpe:2.3:a:rextheme:wp_vr:8.5.26
  • Rextheme » Wp Vr » Version: 8.5.27
    cpe:2.3:a:rextheme:wp_vr:8.5.27
  • Rextheme » Wp Vr » Version: 8.5.28
    cpe:2.3:a:rextheme:wp_vr:8.5.28
  • Rextheme » Wp Vr » Version: 8.5.29
    cpe:2.3:a:rextheme:wp_vr:8.5.29
  • Rextheme » Wp Vr » Version: 8.5.3
    cpe:2.3:a:rextheme:wp_vr:8.5.3
  • Rextheme » Wp Vr » Version: 8.5.30
    cpe:2.3:a:rextheme:wp_vr:8.5.30
  • Rextheme » Wp Vr » Version: 8.5.31
    cpe:2.3:a:rextheme:wp_vr:8.5.31
  • Rextheme » Wp Vr » Version: 8.5.32
    cpe:2.3:a:rextheme:wp_vr:8.5.32
  • Rextheme » Wp Vr » Version: 8.5.4
    cpe:2.3:a:rextheme:wp_vr:8.5.4
  • Rextheme » Wp Vr » Version: 8.5.5
    cpe:2.3:a:rextheme:wp_vr:8.5.5
  • Rextheme » Wp Vr » Version: 8.5.6
    cpe:2.3:a:rextheme:wp_vr:8.5.6
  • Rextheme » Wp Vr » Version: 8.5.7
    cpe:2.3:a:rextheme:wp_vr:8.5.7
  • Rextheme » Wp Vr » Version: 8.5.8
    cpe:2.3:a:rextheme:wp_vr:8.5.8
  • Rextheme » Wp Vr » Version: 8.5.9
    cpe:2.3:a:rextheme:wp_vr:8.5.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved