soft8soft

Security Risk Profile

/100

low

Security Risk Score

Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from December 29, 2023 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

6.7

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

25/100

low

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

CSRF

Malicious File Upload

Code Injection

Most Affected Products

1. Soft8Soft Verge3D4

2. Soft8Soft WordPress Verge3D plugin2

3. Soft8Soft WordPress Verge3D Publishing and E-Commerce Plugin2

4. Soft8Soft Verge3d Wordpress2

5. Soft8Soft Verge3D WordPress plugin1

Recent Vulnerabilities

See more →

CVE-2025-49268

CVSS 5.3EPSS 0%medium

WordPress Verge3D plugin <= 4.9.4 - Broken Access Control Vulnerability

Jun 6, 2025

CVE-2025-48241

CVSS 7.1EPSS 0%high

WordPress Verge3D plugin <= 4.9.3 - Reflected Cross Site Scripting (XSS) vulnerability

May 23, 2025

CVE-2025-39443

CVSS 4.3EPSS 0%medium

WordPress Verge3D plugin <= 4.9.0 - Cross Site Request Forgery (CSRF) vulnerability

Apr 17, 2025

CVE-2025-30833

CVSS 4.3EPSS 0%medium

WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Mar 27, 2025

CVE-2025-22709

CVSS 7.1EPSS 0%high

WordPress Verge3D Publishing and E-Commerce Plugin <= 4.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

Jan 21, 2025

CVE-2023-51421

CVSS 9.9critical

WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload

Dec 29, 2023🔧 No Patch

CVE-2023-51420

CVSS 9.1critical

WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Remote Code Execution (RCE)