CVE-2026-114741: WPVR 9.0.0 to before 9.0.3

Affected technology

WPVR · 9.0.0 to before 9.0.3
Vendor not specified by the source

Description’s affected range: before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours

Component: Not specified by the source

The source does not specify what an attacker can achieve.

Published 25-Oct-2026 10:32 UTC

GitHub Advisory Database · Source record · observed 2026-10-25 10:32:14.832500+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-25 10:32:11.866563+00:00 UTC