CVE-2026-92994 | Verge3D Publishing and E-Commerce Plugin up to 4.13.0 on WordPress File Storage Feature cross site scripting

September 30, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Verge3D Publishing and E-Commerce Plugin up to 4.13.0 on WordPress. This affects an unknown function of the component File Storage Feature. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-92994. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More