WP-Safety

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More Security & Risk Analysis

wordpress.org/plugins/panorama

Panorama Viewer displays panoramic images/videos easily on your WordPress site. Supports various files like .png, .jpeg, .mp4, and more.

2K active installs v1.7.4 PHP 7.1+ WP 6.5+ Updated Jul 11, 2026
360-degree3dkrpanopanoramavirtual-tour
97
A · Safe
CVEs total1
Unpatched0
Last CVEJun 26, 2026
Plugin page Download
Safety Verdict

Is Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More Safe to Use in 2026?

Generally Safe

Score 97/100

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Jun 26, 2026Updated 1mo ago
Risk Assessment

The 'panorama' plugin v1.5.1 exhibits a strong security posture based on the provided static analysis. The absence of directly dangerous functions, raw SQL queries, file operations, and external HTTP requests are significant strengths. Furthermore, the high percentage of properly escaped outputs (94%) and the consistent use of prepared statements for SQL queries indicate good development practices. The presence of nonce and capability checks on all identified entry points (AJAX handlers, shortcodes) is commendable, suggesting a solid defense against common web attacks.

Key Concerns

  • Bundled Freemius v1.0 library may be outdated
  • Minor unescaped output identified (6% of total)
Vulnerabilities
1 published

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More Security Vulnerabilities

CVEs by Year

1 CVE in 2026
2026
Patched Has unpatched

Severity Breakdown

High
1

1 total CVE

CVE-2026-57647high · 7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More <= 1.6.1 - Authenticated (Contributor+) Local File Inclusion

Jun 26, 2026 Patched in 1.7.0 (4d)
Version History

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More Release Timeline

v1.7.4Current
v1.7.3
v1.7.2
v1.7.1
v1.7.0
v1.6.11 CVE
CVE-2026-57647
v1.6.01 CVE
CVE-2026-57647
v1.5.11 CVE
CVE-2026-57647
v1.5.01 CVE
CVE-2026-57647
v1.4.51 CVE
CVE-2026-57647
v1.4.41 CVE
CVE-2026-57647
v1.4.31 CVE
CVE-2026-57647
v1.4.21 CVE
CVE-2026-57647
v1.4.11 CVE
CVE-2026-57647
v1.4.01 CVE
CVE-2026-57647
v1.3.41 CVE
CVE-2026-57647
v1.3.31 CVE
CVE-2026-57647
v1.3.21 CVE
CVE-2026-57647
v1.3.11 CVE
CVE-2026-57647
v1.3.01 CVE
CVE-2026-57647
Code Analysis
Analyzed Mar 16, 2026

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
7
118 escaped
Nonce Checks
4
Capability Checks
8
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

Output Escaping

94% escaped125 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
bppivGetBlocks_callback (panorama.php:79)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More Attack Surface

Entry Points11
Unprotected0

AJAX Handlers 4

authwp_ajax_panoramaPremiumCheckerpanorama.php:66
noprivwp_ajax_panoramaPremiumCheckerpanorama.php:67
authwp_ajax_bppivGetBlockspanorama.php:77
authwp_ajax_psb_save_product_spotproduct-spot.php:15

Shortcodes 7

[panorama] inc\Base\registerPostType.php:9
[virtual-tour] inc\Base\registerPostType.php:10
[panorama] inc\Shortcode.php:10
[product_spot] product-spot.php:9
[panorama] public\shortcode\shortcode.php:60
[panorama] shortcode.php:192
[panorama_product_viewer] shortcode.php:237
WordPress Hooks 53
actionadmin_enqueue_scriptsadmin\ads\submenu.php:3
actionadmin_menuadmin\ads\submenu.php:4
actionadmin_enqueue_scriptsadmin\ads\submenu.php:5
actionenqueue_block_assetsinc\Base\EnqueueAssets.php:7
actionadmin_enqueue_scriptsinc\Base\EnqueueAssets.php:8
actionadmin_enqueue_scriptsinc\Base\EnqueueAssets.php:9
actioninitinc\Base\registerPostType.php:7
actionadmin_menuinc\Base\registerPostType.php:8
filtermanage_bppiv-image-viewer_posts_columnsinc\Base\registerPostType.php:11
actionmanage_bppiv-image-viewer_posts_custom_columninc\Base\registerPostType.php:12
filtermanage_virtual_tour_posts_columnsinc\Base\registerPostType.php:13
actionmanage_virtual_tour_posts_custom_columninc\Base\registerPostType.php:14
actionedit_form_after_titleinc\Base\registerPostType.php:15
filteradmin_footer_textinc\Base\registerPostType.php:16
filtergettextinc\Base\registerPostType.php:17
filterpost_updated_messagesinc\Base\registerPostType.php:18
actionadmin_head-post.phpinc\Base\registerPostType.php:19
actionadmin_head-post-new.phpinc\Base\registerPostType.php:20
filterpost_row_actionsinc\Base\registerPostType.php:22
filtertemplate_includeinc\Base\registerPostType.php:25
actioninitinc\Init.php:12
actionwoocommerce_after_register_post_typeinc\Init.php:13
filtercsf_sc__saveinc\metabox-options-free.php:882
actionwp_enqueue_scriptsinc\templates\single-bppiv-image-viewer.php:2
actionwoocommerce_loadedinc\Woocommerce\ProductView.php:10
actionbp3d_product_model_beforeinc\Woocommerce\ProductView.php:11
actionbp3d_product_model_afterinc\Woocommerce\ProductView.php:12
actionwoocommerce_before_single_product_summaryinc\Woocommerce\ProductView.php:23
actionwoocommerce_before_single_product_summaryinc\Woocommerce\ProductView.php:35
filterwoocommerce_single_product_image_thumbnail_htmlinc\Woocommerce\ProductView.php:71
actionwpinc\Woocommerce\ProductViewPro.php:10
actionbp3d_product_model_beforeinc\Woocommerce\ProductViewPro.php:11
actionbp3d_product_model_afterinc\Woocommerce\ProductViewPro.php:12
actionwoocommerce_before_single_product_summaryinc\Woocommerce\ProductViewPro.php:23
actionwoocommerce_before_single_product_summaryinc\Woocommerce\ProductViewPro.php:35
filterwoocommerce_single_product_image_thumbnail_htmlinc\Woocommerce\ProductViewPro.php:71
actionplugins_loadedpanorama.php:64
actioninitpanorama.php:65
actionadmin_initpanorama.php:68
actionrest_api_initpanorama.php:69
filterplugin_row_metapanorama.php:70
actionadmin_enqueue_scriptspanorama.php:76
actioninitpanorama.php:202
actioninitproduct-spot.php:8
filtermanage_product_spot_posts_columnsproduct-spot.php:10
actionmanage_product_spot_posts_custom_columnproduct-spot.php:11
actionadmin_enqueue_scriptsproduct-spot.php:12
actionadd_meta_boxesproduct-spot.php:13
actionsave_post_productproduct-spot.php:14
actionwp_enqueue_scriptsproduct-spot.php:16
actionwpproduct-spot.php:37
actionwoocommerce_before_single_product_summaryproduct-spot.php:47
actionwoocommerce_before_single_product_summaryproduct-spot.php:48
Maintenance & Trust

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 11, 2026
PHP min version7.1
Downloads71K

Community Trust

Rating86/100
Number of ratings8
Active installs2K
Alternatives

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More Alternatives

Photo Sphere Viewer – 360° Panorama, Virtual Tour, 360 Video & AR 3D Model Viewer

Photo Sphere Viewer – 360° Panorama, Virtual Tour, 360 Video & AR 3D Model Viewer

photo-sphere-viewer

A
100

360° panorama, virtual tour, 360 video & AR 3D model viewer for WordPress. Works with Elementor, Gutenberg & shortcodes. DJI & Ricoh Theta ready.

500 No CVEs
gPano

gPano

gpano

A
85

The plugin allow embed the Google street view panoramas to wordpress.

60 No CVEs
WP Virtual Tour

WP Virtual Tour

wp-virtualtour

A
85

Easily create interactive virtual 360° tours.

40 No CVEs
WonderPano – 360 Panorama Viewer

WonderPano – 360 Panorama Viewer

wonderpano

A
92

WonderPano is a plugin that enables you add interactive 360 photos to your WordPress website.

10 No CVEs
WP VR – 360 Panorama and Virtual Tour Builder

WP VR – 360 Panorama and Virtual Tour Builder

wpvr

A
91

Create stunning 360 virtual tours to impress visitors and get more clients using WPVR - an easy virtual tour creator.

10K 14 CVEs
Developer Profile

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More Developer Profile

colorlibplugins

124 plugins · 730K total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
124 days
View full developer profile
Detection Fingerprints

How We Detect Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/panorama/build/blocks/parent/wp-content/plugins/panorama/build/blocks/image-360/wp-content/plugins/panorama/build/blocks/image-3d/wp-content/plugins/panorama/build/blocks/video/wp-content/plugins/panorama/build/blocks/video-360/wp-content/plugins/panorama/build/blocks/google-street/wp-content/plugins/panorama/build/blocks/gallery/wp-content/plugins/panorama/build/blocks/tour+3 more
Script Paths
/wp-content/plugins/panorama/vendor/freemius/start.php
Version Parameters
panorama/style.css?ver=panorama/script.js?ver=

HTML / DOM Fingerprints

CSS Classes
pano-help-link
HTML Comments
<!-- panorama google street help modal -->
Data Attributes
id="pano-help-modal"id="pano-help-close"
JS Globals
BPPIV_PLUGIN_DIRBPPIV_VERSIONBPPIV_PATHBPPIV__FILE__BPPIV_HAS_PROpanorama_fs
FAQ

Frequently Asked Questions about Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More