Expivi vulnerabilities
We track 1 vulnerability in Expivi products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Expivi vulnerabilities
- 9.8 Critical severity
3D Product configurator for WooCommerce: Unrestricted Upload of File with Dangerous Type
The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter parameter. This is due to missing authentication and nonce checks on the wp_loade