3D Viewer Embed 3D Models

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-40729 Apr 15, 10:21 MEDIUM This Month

Missing authorization in the bPlugins 3D viewer WordPress plugin allows authenticated users with low privileges to bypass access controls and modify content. Affected versions up to and including 1.8.5. No public exploitation has been identified, EPSS score is very low (0.02%), and SSVC indicates no exploitation, so real-world risk is minimal.

WordPress Authentication Bypass 3D Viewer Embed 3D Models Wordpress Plugin Bplugins

NVD

CVSS 3.1

4.3

EPSS

0.0%

CVE-2026-40729

EPSS 0% CVSS 4.3

MEDIUM This Month

Missing authorization in the bPlugins 3D viewer WordPress plugin allows authenticated users with low privileges to bypass access controls and modify content. Affected versions up to and including 1.8.5. No public exploitation has been identified, EPSS score is very low (0.02%), and SSVC indicates no exploitation, so real-world risk is minimal.

WordPress Authentication Bypass 3D Viewer Embed 3D Models +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy