Skip to content
PluginCanary

WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress

by RexTheme · 10,000+ active installs · Checked 3 Nov 2026
Healthy5 Warnings

Healthy: vulnerability published 23 Oct 2026, fixed in 9.0.3.

83/ 100 Canary Score
Sub-scores for WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 23 Oct 2026, fixed in 9.0.3. Update to version 9.0.3 or later.23 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 23 Oct 2026, fixed in 9.1.3. Update to version 9.1.3 or later.23 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 23 Oct 2026, fixed in 9.0.3. Update to version 9.0.3 or later.23 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 22 Oct 2026, fixed in 9.0.3. Update to version 9.0.3 or later.22 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 9.1.4. Update to version 9.1.4 or later.5 Oct 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master11 Dec 2018 to 11 Dec 2018, 1 commits
rextheme12 Dec 2018 to 16 Oct 2026, 386 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
19 days ago
Releases, 24 months
84
Tested up to
7.1 current
Requires PHP
7.0.0 supported 8.2+
Releases per quarter for WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress
Q1 20243
Q2 20248
Q3 20246
Q4 20247
Q1 202512
Q2 20259
Q3 20257
Q4 202511
Q1 202612
Q2 202612
Q3 202612
Q4 20264

Last release 16 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
23 Oct 2026VR 8.3.0 - 9.0.2 - Authenticated (Contributor+) Insecure Direct Object Reference4.38.3.0 to 9.0.29.0.30
23 Oct 2026VR 9.0.0 - 9.0.2 - Authenticated (Contributor+) Insecure Direct Object Reference4.39.0.0 to 9.0.29.0.30
23 Oct 2026VR 8.5.55 - 9.1.2 - Missing Authorization4.38.5.55 to 9.1.29.1.30
22 Oct 2026VR 8.5.49 - 9.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.48.5.49 to 9.0.29.0.30
5 Oct 2026WPVR – 360 Panorama viewer and Virtual Tour Builder for WordPress <= 9.1.3 - Missing Authorization4.3<= 9.1.39.1.40
24 Oct 2025WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.41 - Improper Authorization to Authenticated (Contributor+) Plugin Settings Update4.3<= 8.5.418.5.420
27 Jun 2025WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress <= 8.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.5.328.5.330
27 Jun 2025VR <= 8.5.48 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.5.488.5.49167
12 Jun 2025WP VR <= 8.5.26 - Authenticated (Contributor+) Arbitrary File Upload8.8<= 8.5.268.5.270
24 Jan 2025WP VR <= 8.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.5.148.5.150
21 Oct 2024WP VR <= 8.5.5 - Missing Authorization4.3<= 8.5.58.5.60
15 Oct 2024WP VR <= 8.5.4 - Missing Authorization4.3<= 8.5.48.5.50
14 Dec 2023WP VR <= 8.3.14 - Missing Authorization to Plugin Version Downgrade5.3<= 8.3.148.3.150
18 Aug 2023WP VR <= 8.3.4 - Reflected Cross-Site Scripting6.1<= 8.3.48.3.51
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.11.0.11.0.20
29 Mar 2023WP VR <= 8.2.9 - Missing Authorization4.3<= 8.2.98.3.00
22 Mar 2023WP VR <= 8.2.8 - Reflected Cross-Site Scripting6.1<= 8.2.58.2.60
14 Feb 2023WP VR <= 8.2.7 - Cross-Site Request Forgery4.3<= 8.2.78.2.80
12 Jan 2023WP VR <= 8.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode7.4<= 8.2.68.2.70
16 Dec 2022Appsero <= 1.2.1 - Missing Authorization4.3<= 8.2.58.2.60
14 Dec 2022Appsero <= 1.2.0 - Cross-Site Request Forgery4.3<= 8.2.58.2.61

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress
Q1 20254.6
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0

Average rating rose from 4.6 to 5.0 between Q1 2025 and Q3 2026.

Rating distribution
5 star118
4 star4
3 star2
2 star6
1 star3
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress
4 May 20264,767
11 May 20265,298
18 May 20266,043
25 May 20261,378
1 Jun 20265,144
8 Jun 20265,249
15 Jun 20261,340
22 Jun 2026935
29 Jun 2026984
6 Jul 20265,625
13 Jul 20261,081
20 Jul 20261,002
27 Jul 20265,174
3 Aug 20262,033
10 Aug 20269,596
17 Aug 20266,132
24 Aug 20265,537
31 Aug 20269,827
7 Sep 20265,753
14 Sep 20269,799
21 Sep 20262,004
28 Sep 20265,057
5 Oct 20267,161
12 Oct 20269,568
19 Oct 20262,354
26 Oct 20261,975
2 Nov 2026214

Weekly downloads over the last 4 weeks are 21% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version9.3.1
AuthorRexTheme
Added12 Dec 2018
Last updated16 Oct 2026
Active installs10,000+
Requires WordPress6.7
Tested up to7.1.4
Requires PHP7.0.0
CategoryE-commerce & Shopping
Tagsreal-estate, 360 panorama, Virtual Tour, panorama viewer

Other plugins by this author: Product Feed Manager for WooCommerce - RexFeed - Sell on 200+ Shopping Channels, Cart Lift - Abandoned Cart Recovery for WooCommerce and EDD, UGCify - UGC for WooCommerce ( Customer Photos, Videos & Visual Reviews )

Questions

Is WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress still maintained?

WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress was last updated on 16 Oct 2026. Its Canary status is Healthy.

Is WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress safe?

WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress?

The wordpress.org author is RexTheme. Recent committers: rextheme, plugin-master. We have recorded no ownership change.

What can I use instead of WPVR - 360 Panorama viewer and Virtual Tour Builder for WordPress?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue