Advisories · Technology

Verge3D Publishing and E-Commerce.

Every CVE that names Verge3D Publishing and E-Commerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92994 CVE record

CVSS 8.8 High

Verge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API
- Verge3D Publishing and E-Commerce
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-92996 CVE record

CVSS 5.3 Medium

Verge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done
- Verge3D Publishing and E-Commerce
- CWE-345
Not analysed yet 28 Sept 2026
CVE-2026-92995 CVE record

CVSS 5.3 Medium

Verge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file
- Verge3D Publishing and E-Commerce
- Information disclosure
Not analysed yet 27 Sept 2026