Verge3D Publishing and E-Commerce
Limited data: Verge3D Publishing and E-Commerce has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 60 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 28 Sep 2026, fixed in 4.13.1. Update to version 4.13.1 or later.28 Sep 2026Evidence
- WarningSEC-1Vulnerability published 25 Sep 2026, fixed in 4.13.1. Update to version 4.13.1 or later.25 Sep 2026Evidence
- WarningSEC-1Vulnerability published 25 Sep 2026, fixed in 4.13.1. Update to version 4.13.1 or later.25 Sep 2026Evidence
- InfoSEC-38 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 47 days ago
- Releases, 24 months
- 1
- Tested up to
- 7.1 current
- Requires PHP
- 7.0 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 18 Sep 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 28 Sep 2026 | Verge3D <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 4.13.0 | 4.13.1 | 0 |
| 25 Sep 2026 | Verge3D 4.1.0 - 4.13.0 - Missing Authorization | 5.3 | 4.1.0 to 4.13.0 | 4.13.1 | 0 |
| 25 Sep 2026 | Verge3D <= 4.13.0 - Unauthenticated Information Exposure | 5.3 | <= 4.13.0 | 4.13.1 | 0 |
| 5 Jun 2025 | Verge3D <= 4.9.4 - Missing Authorization | 5.3 | <= 4.9.4 | 4.9.5 | n/a |
| 29 May 2025 | Verge3D <= 4.9.3 - Reflected Cross-Site Scripting | 6.1 | <= 4.9.3 | 4.9.4 | n/a |
| 17 Apr 2025 | Verge3D <= 4.9.0 - Cross-Site Request Forgery | 4.3 | <= 4.9.0 | 4.9.3 | n/a |
| 27 Mar 2025 | Verge3D <= 4.8.2 - Cross-Site Request Forgery | 4.3 | <= 4.8.2 | 4.8.3 | n/a |
| 15 Jan 2025 | Verge3D <= 4.8.0 - Reflected Cross-Site Scripting | 6.1 | <= 4.8.0 | 4.8.1 | n/a |
| 27 Dec 2023 | Verge3D <= 4.5.2 - Authenticated(Subscriber+) Arbitrary File Upload | 8.8 | <= 4.5.2 | 4.5.3 | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.0 from 4 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 3 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 1 |
Momentum
400+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 4.13.1 |
|---|---|
| Author | Soft8Soft LLC |
| Added | 19 Sep 2018 |
| Last updated | 18 Sep 2026 |
| Active installs | 400+ |
| Requires WordPress | 5.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.0 |
| Category | not stated |
| Tags | 3d, 3dweb, webgl, verge3d, ecommerce |
Questions
Is Verge3D Publishing and E-Commerce still maintained?
Verge3D Publishing and E-Commerce was last updated on 18 Sep 2026. Its Canary status is Limited data.
Is Verge3D Publishing and E-Commerce safe?
Verge3D Publishing and E-Commerce has no open unpatched vulnerabilities on record. 8 vulnerabilities were published in the last 24 months. Its Canary status is Limited data.
Who owns Verge3D Publishing and E-Commerce?
The wordpress.org author is Soft8Soft LLC. We have recorded no ownership change.
What can I use instead of Verge3D Publishing and E-Commerce?
We have no healthier plugin in the same category on record yet.