[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fO15qMQeAaqkd99Awp7nHBQrtkvenBTVfubqrOSRVTlM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":116,"crawl_stats":37,"alternatives":122,"analysis":214,"fingerprints":810},"verge3d","Verge3D Publishing and E-Commerce","4.11.0","Soft8Soft LLC","https:\u002F\u002Fprofiles.wordpress.org\u002Fsoft8soft\u002F","\u003Cp>Verge3D is the most artist-friendly toolkit for creating interactive WebGL-based and immersive AR\u002FVR experiences. Among the features of this framework are top-class graphics, integration with your favorite modeling suites, efficient web-friendly format for loading assets, seamless integration with WordPress and WooCommerce plugin. Interactivity is enabled with Puzzles, an intuitive and easy-to-learn visual scripting environment.\u003C\u002Fp>\n\u003Cp>Verge3D can be used to create product configurators, 3D presentations, online stores, e-learning apps, 3D portfolios, browser games, and more.\u003C\u002Fp>\n\u003Cp>You can try this plugin live using this \u003Ca href=\"https:\u002F\u002Fsandbox.soft8soft.com\u002F\" rel=\"nofollow ugc\">sandbox website\u003C\u002Fa> or follow the quick-start guide \u003Ca href=\"https:\u002F\u002Fwww.soft8soft.com\u002Fmaking-3d-product-configurator-for-woocommerce\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Take 3D web for a spin\u003C\u002Fh4>\n\u003Cp>The high-tech WebGL technology becomes accessible with Verge3D. Your beautiful content will live on your WordPress website and thus will be available to billions of Internet users.\u003C\u002Fp>\n\u003Cp>Interactivity, true 360 view and zooming capabilities bring your creation to entirely new level of engagement. It will work everywhere, from a small smartphone to workstation and even a TV set. We designed and assembled all tools you need in one place and called it Verge3D!\u003C\u002Fp>\n\u003Ch4>Quality real-time graphics\u003C\u002Fh4>\n\u003Cp>With Verge3D, real-time graphics are no longer associated with video games. Realistic visuals become possible with a sophisticated yet easy-to-use material system which is fully consistent with the modeling suite of your choice.\u003C\u002Fp>\n\u003Cp>On the other hand, physically based rendering (PBR) which comes with Verge3D simplifies the task of creating engaging 3D Web content even more. You no longer need to be an experienced 3D specialist or graphics programmer to achieve a high level of representation. We already took care of it!\u003C\u002Fp>\n\u003Ch4>Use familiar tools\u003C\u002Fh4>\n\u003Cp>We designed Verge3D to be closely integrated with your favorite tools. You can create your 3D content in Blender, 3ds Max, or Maya, and export straight to a web page. You can also preview your scene in the browser using the Sneak Peek feature.\u003C\u002Fp>\n\u003Cp>But, of course, aside from the 3D part, there is also web! With Verge3D, you can completely forget about building HTML\u002FCSS layouts and JavaScript coding by\u003Cbr \u002F>\nhand. Verge3D perfectly works with WordPress and WooCoommerce, as well as the design software such as Webflow or Google Web Designer.\u003C\u002Fp>\n\u003Ch4>Interactivity without coding\u003C\u002Fh4>\n\u003Cp>Verge3D Puzzles are a fun, yet powerful tool to develop smart web applications of any complexity. With Puzzles, you can easily add behavior scenarios to your 3D content, making it interactive and responsive to user actions. Puzzles will increase efficiency of your team by distributing responsibilities between programmers and designers.\u003C\u002Fp>\n\u003Cp>This amazing tool can be used both for fast prototyping and in production. For 3D artists, this invaluable tool overcomes technological barriers of web development thus making it possible to apply their creativity in the realm of interactive 3D Web!\u003C\u002Fp>\n\u003Ch4>No vendor locks, no strings attached\u003C\u002Fh4>\n\u003Cp>It’s up to you to decide whether to keep your 3D works private, show to your partners or share with the general public. Verge3D-based apps are hosted on your own WordPress servers and have no dependencies on any cloud platforms.\u003C\u002Fp>\n\u003Cp>As such, you are in control of your own data, being able to choose how to store it, where and for how long.\u003C\u002Fp>\n","Verge3D application publising and e-commerce plugin for WordPress.",500,25619,80,4,"2025-11-18T12:27:00.000Z","6.8.5","5.0","7.0",[20,21,22,4,23],"3d","3dweb","ecommerce","webgl","https:\u002F\u002Fwww.soft8soft.com\u002Fverge3d","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fverge3d.zip",94,6,0,"2025-06-05 00:00:00","2026-03-15T15:16:48.613Z",[32,47,62,77,89,101],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":39,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":27},"CVE-2025-49268","verge3d-missing-authorization","Verge3D \u003C= 4.9.4 - Missing Authorization","The Verge3D Publishing and E-Commerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.9.4. This makes it possible for unauthenticated attackers to perform an unauthorized action.",null,"\u003C=4.9.4","4.9.5","medium",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Missing Authorization","2025-06-10 18:24:28",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F8eb4e5bf-d9cf-4123-8180-34b3624e86ae?source=api-prod",{"id":48,"url_slug":49,"title":50,"description":51,"plugin_slug":4,"theme_slug":37,"affected_versions":52,"patched_in_version":53,"severity":40,"cvss_score":54,"cvss_vector":55,"vuln_type":56,"published_date":57,"updated_date":58,"references":59,"days_to_patch":61},"CVE-2025-48241","verge3d-reflected-cross-site-scripting-2","Verge3D \u003C= 4.9.3 - Reflected Cross-Site Scripting","The Verge3D Publishing and E-Commerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 4.9.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.","\u003C=4.9.3","4.9.4",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-05-29 00:00:00","2025-05-30 20:18:22",[60],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fa0fa6d9f-7243-4349-9c79-00199ee84c25?source=api-prod",2,{"id":63,"url_slug":64,"title":65,"description":66,"plugin_slug":4,"theme_slug":37,"affected_versions":67,"patched_in_version":68,"severity":40,"cvss_score":69,"cvss_vector":70,"vuln_type":71,"published_date":72,"updated_date":73,"references":74,"days_to_patch":76},"CVE-2025-39443","verge3d-cross-site-request-forgery","Verge3D \u003C= 4.9.0 - Cross-Site Request Forgery","The Verge3D Publishing and E-Commerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=4.9.0","4.9.3",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-04-17 00:00:00","2025-04-21 19:55:16",[75],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F0dbce573-fced-4c0f-ba1e-2932c166545c?source=api-prod",5,{"id":78,"url_slug":79,"title":80,"description":81,"plugin_slug":4,"theme_slug":37,"affected_versions":82,"patched_in_version":83,"severity":40,"cvss_score":69,"cvss_vector":70,"vuln_type":71,"published_date":84,"updated_date":85,"references":86,"days_to_patch":88},"CVE-2025-30833","verge3d-cross-site-request-forgery-2","Verge3D \u003C= 4.8.2 - Cross-Site Request Forgery","The Verge3D Publishing and E-Commerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.8.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=4.8.2","4.8.3","2025-03-27 00:00:00","2025-04-02 15:18:35",[87],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F529f411a-8b3c-4cb9-b067-4755972d6c07?source=api-prod",7,{"id":90,"url_slug":91,"title":92,"description":93,"plugin_slug":4,"theme_slug":37,"affected_versions":94,"patched_in_version":95,"severity":40,"cvss_score":54,"cvss_vector":55,"vuln_type":56,"published_date":96,"updated_date":97,"references":98,"days_to_patch":100},"CVE-2025-22709","verge3d-reflected-cross-site-scripting","Verge3D \u003C= 4.8.0 - Reflected Cross-Site Scripting","The Verge3D plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.8.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.","\u003C=4.8.0","4.8.1","2025-01-15 00:00:00","2025-01-22 20:37:00",[99],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F73913fc5-aee4-4613-9bd6-76e091227c2c?source=api-prod",8,{"id":102,"url_slug":103,"title":104,"description":105,"plugin_slug":4,"theme_slug":37,"affected_versions":106,"patched_in_version":107,"severity":108,"cvss_score":109,"cvss_vector":110,"vuln_type":111,"published_date":112,"updated_date":113,"references":114,"days_to_patch":26},"CVE-2023-51421","verge3d-authenticatedsubscriber-arbitrary-file-upload","Verge3D \u003C= 4.5.2 - Authenticated(Subscriber+) Arbitrary File Upload","The Verge3D Publishing and E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'v3d_upload_app_file' function in all versions up to, and including, 4.5.2. This makes it possible for authenticated attackers, with subscriber access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVE-2023-51420 may be a duplicate of this issue.","\u003C=4.5.2","4.5.3","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Unrestricted Upload of File with Dangerous Type","2023-12-27 00:00:00","2024-03-29 15:46:09",[115],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F71dd864f-1975-4cee-be26-0cdb0d54be95?source=api-prod",{"slug":117,"display_name":7,"profile_url":8,"plugin_count":118,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":119,"trust_score":120,"computed_at":121},"soft8soft",1,20,90,"2026-04-04T15:29:09.183Z",[123,145,163,179,198],{"slug":124,"name":125,"version":126,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":131,"downloaded":132,"rating":133,"num_ratings":61,"last_updated":134,"tested_up_to":135,"requires_at_least":136,"requires_php":137,"tags":138,"homepage":143,"download_link":144,"security_score":133,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"threewp","ThreeWP","2.0.2","Rownok Bosunia","https:\u002F\u002Fprofiles.wordpress.org\u002Frondevs\u002F","\u003Cp>ThreeWP is a WordPress plugin that integrates the Three.js library and its addons into your WordPress site using a custom bundle file. This setup allows you to create and manage custom 3D models, animations, and interactive graphics directly within your WordPress theme or custom JavaScript code.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Custom Bundle Integration: Enqueues the Three.js library and essential addons using a custom bundle file, avoiding reliance on a CDN.\u003C\u002Fli>\n\u003Cli>Easy Setup: Straightforward installation and activation process.\u003C\u002Fli>\n\u003Cli>Custom Integration: No built-in shortcodes or settings; users add their own Three.js code for full customization.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Source Code\u003C\u002Fh3>\n\u003Cp>The source code for the minified JavaScript bundle file used in this plugin is publicly available at the following URL: https:\u002F\u002Fgithub.com\u002Frondevs\u002Fthreejs-custom-bundler\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>After activating the plugin, Use the \u003Ccode>[use_threewp]\u003C\u002Fcode> shortcode to enable Three.js for specific pages. Three.js and its addons will be available for use in your theme or custom JavaScript files. You need to manually add your Three.js code to create and manage 3D content.\u003C\u002Fp>\n\u003Ch3>Example Usage\u003C\u002Fh3>\n\u003Cp>Add Custom JavaScript:\u003Cbr \u002F>\n– Add your Three.js initialization and rendering code to your theme’s JavaScript file or use a custom script. Here’s a basic example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>document.addEventListener('DOMContentLoaded', function () {\n    if (typeof ThreeWP !== 'undefined') {\n        \u002F\u002F Destructure THREE and THREE_ADDONS from ThreeWP\n        const { THREE, OrbitControls } = ThreeWP;\n        \u002F\u002F Create a scene\n        const scene = new THREE.Scene();\n        \u002F\u002F Setup a camera\n        const camera = new THREE.PerspectiveCamera(\n            75,\n            window.innerWidth \u002F window.innerHeight,\n            0.1,\n            1000,\n        );\n        \u002F\u002F Setup a renderer\n        const renderer = new THREE.WebGLRenderer();\n        \u002F\u002F Give the renderer a width and height\n        renderer.setSize(window.innerWidth, window.innerHeight);\n        \u002F\u002F Append the renderer into the html body\n        document.body.appendChild(renderer.domElement);\n        \u002F\u002F Set camera position\n        camera.position.z = 2;\n        \u002F\u002F Load a texture\n        const textureLoader = new THREE.TextureLoader();\n        const texture = textureLoader.load(\n            'https:\u002F\u002Fthreejsfundamentals.org\u002Fthreejs\u002Fresources\u002Fimages\u002Fwall.jpg',\n        ); \u002F\u002F Replace with your image URL\n        \u002F\u002F Create geometry\n        const geometry = new THREE.BoxGeometry(1, 1, 1);\n        \u002F\u002F Create material\n        const material = new THREE.MeshStandardMaterial({ map: texture });\n        \u002F\u002F Combine into mesh\n        const sphere = new THREE.Mesh(geometry, material);\n        scene.add(sphere);\n        const light = new THREE.AmbientLight(0xffffff);\n        scene.add(light);\n        \u002F\u002F Set up OrbitControls\n        const controls = new OrbitControls(\n            camera,\n            renderer.domElement,\n        );\n        \u002F\u002F Optional: Adjust controls settings (e.g., damping, auto-rotation)\n        controls.enableDamping = true; \u002F\u002F Adds smoothness when dragging\n        controls.dampingFactor = 0.03;\n        controls.autoRotate = true;\n        controls.autoRotateSpeed = 2;\n        function animate(t = 0) {\n            requestAnimationFrame(animate);\n            controls.update();\n            renderer.render(scene, camera);\n        }\n        animate();\n        \u002F\u002F Responsive\n        window.addEventListener('resize', () => {\n            camera.aspect = window.innerWidth \u002F window.innerHeight;\n            camera.updateProjectionMatrix();\n            renderer.setSize(window.innerWidth, window.innerHeight);\n        });\n    } else {\n        console.error('Three.js could not be loaded.');\n    }\n});\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>NOTE: Destructure THREE and the addons to access from ThreeWP bundle.\u003C\u002Fp>\n\u003Ch3>Tips\u003C\u002Fh3>\n\u003Cp>Responsive Design: Adjust the size of the Three.js container or renderer according to your design requirements. Handle window resizing events to keep the 3D content responsive.\u003Cbr \u002F>\nDocumentation: Refer to the Three.js documentation for detailed information on creating more complex scenes, objects, and animations.\u003C\u002Fp>\n\u003Ch3>Available Tools in This Plugin\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>THREE\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Addons:\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>ArcballControls\u003C\u002Fli>\n\u003Cli>BufferGeometryUtils\u003C\u002Fli>\n\u003Cli>CameraUtils\u003C\u002Fli>\n\u003Cli>CCDIKSolver\u003C\u002Fli>\n\u003Cli>ConvexGeometry\u003C\u002Fli>\n\u003Cli>ConvexH\u003C\u002Fli>\n\u003Cli>CSS2DRenderer\u003C\u002Fli>\n\u003Cli>CSS3DRenderer\u003C\u002Fli>\n\u003Cli>DecalGeometry\u003C\u002Fli>\n\u003Cli>DRACOLoader\u003C\u002Fli>\n\u003Cli>DragControls\u003C\u002Fli>\n\u003Cli>EdgeSplitModifier\u003C\u002Fli>\n\u003Cli>EffectComposer\u003C\u002Fli>\n\u003Cli>FirstPersonControls\u003C\u002Fli>\n\u003Cli>FlyControls\u003C\u002Fli>\n\u003Cli>FontLoader\u003C\u002Fli>\n\u003Cli>GLTFLoader\u003C\u002Fli>\n\u003Cli>KTX2Loader\u003C\u002Fli>\n\u003Cli>LDrawLoader\u003C\u002Fli>\n\u003Cli>Lensflare\u003C\u002Fli>\n\u003Cli>LensflareElement\u003C\u002Fli>\n\u003Cli>LightProbeGenerator\u003C\u002Fli>\n\u003Cli>LightProbeHelper\u003C\u002Fli>\n\u003Cli>Lut\u003C\u002Fli>\n\u003Cli>LUT3dlLoader\u003C\u002Fli>\n\u003Cli>LUTCubeLoader\u003C\u002Fli>\n\u003Cli>MapControls\u003C\u002Fli>\n\u003Cli>MeshSurfaceSampler\u003C\u002Fli>\n\u003Cli>MMDAnimationHelper\u003C\u002Fli>\n\u003Cli>MMDLoader\u003C\u002Fli>\n\u003Cli>MMDPhysics\u003C\u002Fli>\n\u003Cli>MTLLoader\u003C\u002Fli>\n\u003Cli>OBB\u003C\u002Fli>\n\u003Cli>OBJLoader\u003C\u002Fli>\n\u003Cli>OrbitControls\u003C\u002Fli>\n\u003Cli>ParametricGeometry\u003C\u002Fli>\n\u003Cli>PCDLoader\u003C\u002Fli>\n\u003Cli>PDBLoader\u003C\u002Fli>\n\u003Cli>PointerLockControls\u003C\u002Fli>\n\u003Cli>PositionalAudioHelper\u003C\u002Fli>\n\u003Cli>RectAreaLightHelper\u003C\u002Fli>\n\u003Cli>Rhino3dmLoader\u003C\u002Fli>\n\u003Cli>SceneUtils\u003C\u002Fli>\n\u003Cli>SDFGeometryGenerator\u003C\u002Fli>\n\u003Cli>SkeletonUtils\u003C\u002Fli>\n\u003Cli>Sky\u003C\u002Fli>\n\u003Cli>SVGLoader\u003C\u002Fli>\n\u003Cli>SVGRenderer\u003C\u002Fli>\n\u003Cli>TeapotGeometry\u003C\u002Fli>\n\u003Cli>TextGeometry\u003C\u002Fli>\n\u003Cli>TGALoader\u003C\u002Fli>\n\u003Cli>Timer\u003C\u002Fli>\n\u003Cli>TrackballControls\u003C\u002Fli>\n\u003Cli>TransformControls\u003C\u002Fli>\n\u003Cli>VertexNormalsHelper\u003C\u002Fli>\n\u003Cli>VertexTangentsHelper\u003C\u002Fli>\n\u003Cli>XREstimatedLight\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>v2.0.2\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Updated custom bundle file.\u003C\u002Fli>\n\u003Cli>Removed external dependencies from the bundle.\u003C\u002Fli>\n\u003Cli>Introduced shortcode [use_threewp] to load the Three.js bundle script only on pages that contain the shortcode.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>2.0.1\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Added \u003Ccode>defer\u003C\u002Fcode> attribute to the Three.js script for improved performance and load times.\u003C\u002Fli>\n\u003Cli>Updated plugin code for better compatibility with modern browsers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>2.0.0\u003C\u002Fh4>\n\u003Cp>*Introduced custom bundle file integration for Three.js and essential addons like OrbitControls, GLTFLoader, EffectComposer, and BloomPass etc.\u003Cbr \u002F>\n*This version enhances the plugin’s capabilities and provides a more comprehensive setup for integrating Three.js with WordPress.\u003C\u002Fp>\n\u003Ch4>1.1.0\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Added Three.js Addons Support with CDN\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.0.0\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Initial release of the Three.js CDN Integration plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Contributing\u003C\u002Fh3>\n\u003Cp>We welcome contributions to improve this plugin. If you have suggestions, bug reports, or feature requests, please open an issue on https:\u002F\u002Fgithub.com\u002Frondevs\u002Fthreewp\u002Fissues.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later. See the LICENSE file for details.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>If you encounter any issues or need assistance, please reach out via https:\u002F\u002Fgithub.com\u002Frondevs\u002Fthreewp\u002Fissues.\u003C\u002Fp>\n\u003Cp>Thank you for using ThreeWP! We hope it enhances your WordPress site with exciting 3D content.\u003C\u002Fp>\n","Easily integrate Three.js with WordPress to create and display 3D models and animations.",200,2598,100,"2025-12-20T20:21:00.000Z","6.9.4","5.4","7.4",[139,140,141,23,142],"3d-graphics","three-js","visualization","wordpress-3d","https:\u002F\u002Fwww.github.com\u002Frondevs\u002Fthreewp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fthreewp.2.0.2.zip",{"slug":146,"name":147,"version":148,"author":149,"author_profile":150,"description":151,"short_description":152,"active_installs":153,"downloaded":154,"rating":28,"num_ratings":28,"last_updated":155,"tested_up_to":135,"requires_at_least":156,"requires_php":137,"tags":157,"homepage":161,"download_link":162,"security_score":133,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"cubelaunch","CubeLaunch","1.0.3","digibrief","https:\u002F\u002Fprofiles.wordpress.org\u002Fdigibrief\u002F","\u003Cp>Bored of static content? CubeLaunch lets you embed interactive 3D \u003Cstrong>cubes\u003C\u002Fstrong> and \u003Cstrong>pyramids\u003C\u002Fstrong> powered by WebGL—via a Gutenberg block, a shortcode, or a site‑wide “Coming Soon” overlay.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key features\u003C\u002Fstrong>\u003Cbr \u002F>\n* \u003Cstrong>Interactive 3D\u003C\u002Fstrong>: drag to spin (X\u002FY) with inertia; pinch to zoom on touch devices.\u003Cbr \u002F>\n* \u003Cstrong>Cubes & pyramids\u003C\u002Fstrong> with \u003Cstrong>custom faces\u003C\u002Fstrong> (images from the Media Library; built‑in 1:1 cropper).\u003Cbr \u002F>\n* \u003Cstrong>Gutenberg block\u003C\u002Fstrong> with \u003Cstrong>Small \u002F Medium \u002F Large\u003C\u002Fstrong> presets + optional background‑color override.\u003Cbr \u002F>\n* \u003Cstrong>Shortcode\u003C\u002Fstrong> to embed anywhere shortcodes are supported.\u003Cbr \u002F>\n* \u003Cstrong>Mobile‑friendly scrolling\u003C\u002Fstrong>: on phones we add slim, invisible “scroll rails” around the canvas so the page still scrolls naturally even when the cube is under your thumb (side rails via CSS; top\u002Fbottom rails via a tiny JS helper). All adjustable via CSS variables.\u003Cbr \u002F>\n* \u003Cstrong>Coming Soon overlay\u003C\u002Fstrong> (optional): a full‑page teaser with your shape, copy and a form (shortcodes\u002FHTML).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Quick mobile tips\u003C\u002Fstrong>\u003Cbr \u002F>\n– Want smaller cubes on phones? Set \u003Ccode>--cl-mobile-size\u003C\u002Fcode> per instance (or change the global defaults in \u003Ccode>:root\u003C\u002Fcode>).\u003Cbr \u002F>\n– Want easier scrolling near the cube? We already add invisible “rails” on phones. Tweak \u003Ccode>--cl-rail-width\u003C\u002Fcode> (sides) and \u003Ccode>--cl-rail-height\u003C\u002Fcode> (top\u002Fbottom). Set them to \u003Ccode>0\u003C\u002Fcode> to disable.\u003Cbr \u002F>\n\u003Cstrong>Note:\u003C\u002Fstrong> Mobile “rails” affect embedded cubes (Block\u002FShortcode), \u003Cstrong>not\u003C\u002Fstrong> the Coming Soon overlay.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose CubeLaunch?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Whether you’re looking to create a unique product highlight, an engaging call-to-action, or simply add a touch of interactive flair to your website, CubeLaunch provides an easy-to-use solution. Its “Coming Soon” mode is perfect for building anticipation and capturing leads before your full site goes live. Ideal for portfolios, digital agencies, product launches, or any site wanting to make a memorable first impression.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>CubeLaunch Pro (optional)\u003C\u002Fstrong>\u003Cbr \u002F>\nUnlock extras when you need them:\u003Cbr \u002F>\n* Video textures for dynamic faces\u003Cbr \u002F>\n* Stocks & crypto charts on faces (auto‑updating)\u003Cbr \u002F>\n* Clickable face URLs to link to products or pages\u003Cbr \u002F>\n* Texture rotation options\u003Cbr \u002F>\n* Optional Z‑axis spin\u003C\u002Fp>\n\u003Cp>\u003Cstrong>See it in action \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan>\u003C\u002Fstrong> \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fdigibrief.com\" rel=\"nofollow ugc\">DigiBrief.com\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Basic Usage\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>A) Coming Soon overlay\u003C\u002Fstrong>\u003Cbr \u002F>\n– Admin \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> \u003Cstrong>CubeLaunch \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Coming Soon Settings\u003C\u002Fstrong>.\u003Cbr \u002F>\n– Configure the shape + faces, text, and (optionally) a signup form (shortcode or HTML).\u003Cbr \u002F>\n– Enable the overlay. Visitors who aren’t logged in will see your Coming Soon page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>B) Gutenberg Block – Reusable shapes (CPT) for Posts & Pages\u003C\u002Fstrong>\u003Cbr \u002F>\n– Admin \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> \u003Cstrong>CubeLaunch \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Shapes for Pages & Posts\u003C\u002Fstrong> \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> \u003Cstrong>Add New Shape Configuration\u003C\u002Fstrong>.\u003Cbr \u002F>\n– Choose Cube or Pyramid, set faces\u002Fbackground, Publish.\u003Cbr \u002F>\n– In the block editor, search for and insert the \u003Cstrong>“CubeLaunch Shape”\u003C\u002Fstrong> block and pick your saved configuration.\u003Cbr \u002F>\n– Adjust “Small \u002F Medium \u002F Large” in block settings.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>C) Shortcodes\u003C\u002Fstrong>\u003Cbr \u002F>\n– On the same Shapes for Pages & Posts screen, each saved shape shows a shortcode you can paste into page builders, widgets, or classic editor.\u003Cbr \u002F>\n– Example (paste \u003Cstrong>literally\u003C\u002Fstrong>):\u003C\u002Fp>\n\u003Cpre>\u003Ccode>  [cubelaunch_shape id=\"123\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>\n\u003Cp>You can add your own class for per‑instance CSS:\u003C\u002Fp>\n\u003Cp>[cubelaunch_shape id=”123″ class=”my-promo-cube”]\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Third Party Libraries\u003C\u002Fh3>\n\u003Cp>This plugin incorporates the following third-party libraries. We are grateful to their developers for making their work available.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>glMatrix\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Source: Originally from https:\u002F\u002Fcdnjs.cloudflare.com\u002Fajax\u002Flibs\u002Fgl-matrix\u002F2.8.1\u002Fgl-matrix-min.js (Now bundled locally in \u003Ccode>\u002Fvendor\u002Fjs\u002F\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>License: MIT License\u003C\u002Fli>\n\u003Cli>License URI: https:\u002F\u002Fgithub.com\u002Ftoji\u002Fgl-matrix\u002Fblob\u002Fmaster\u002FLICENSE.md\u003C\u002Fli>\n\u003Cli>Copyright (c) 2015-2021, Brandon Jones, Colin MacKenzie IV.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Cropper.js\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Source: Originally from https:\u002F\u002Fcdnjs.cloudflare.com\u002Fajax\u002Flibs\u002Fcropperjs\u002F1.5.12\u002Fcropper.min.js (Now bundled locally in \u003Ccode>\u002Fvendor\u002Fjs\u002F\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>License: MIT License\u003C\u002Fli>\n\u003Cli>License URI: https:\u002F\u002Fgithub.com\u002Ffengyuanchen\u002Fcropperjs\u002Fblob\u002Fmain\u002FLICENSE\u003C\u002Fli>\n\u003Cli>Copyright (c) 2015-present Chen Fengyuan\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Embed interactive, rotatable, pinch and zoom 3D cubes or pyramids with custom faces via Gutenberg blocks, shortcodes, or a site-wide Coming Soon page.",10,387,"2025-12-02T12:30:00.000Z","5.8",[20,158,159,160,23],"block","coming-soon","shortcode","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcubelaunch.1.0.3.zip",{"slug":164,"name":165,"version":166,"author":167,"author_profile":168,"description":169,"short_description":170,"active_installs":153,"downloaded":171,"rating":28,"num_ratings":28,"last_updated":172,"tested_up_to":16,"requires_at_least":156,"requires_php":137,"tags":173,"homepage":177,"download_link":178,"security_score":133,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"rooom-3d-product-viewer","rooom 3D Product Viewer","1.1.3","rooom","https:\u002F\u002Fprofiles.wordpress.org\u002Frooomcom\u002F","\u003Cp>With the rooom 3D Product Viewer for WooCommerce you can easily and quickly add a rooom product viewer to your product data. Just put the viewer link in the corresponding field in your Woocommerce backend and let the 3d shopping experience begin. Integrate the viewer nicely and cleanly without any developer knowledge. Your loading time will remain unaffected, while your user satisfaction will increase. The viewer appears as a separate image next to the normal product images on your page and can be explored in 3D, AR and even VR with just one click – simply via the browser, without download or special technology requirements.\u003C\u002Fp>\n\u003Ch4>Whats included?\u003C\u002Fh4>\n\u003Cp>The plugin contains an extension of the input mask for product data in the backend of your store. For your customer there is a separate image for the viewer in the frontend, which pops up with a click and can be explored in 3D, AR or VR.\u003C\u002Fp>\n\u003Ch4>Benefits\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Build a 3D e-commerce experience fast and easy.\u003C\u002Fli>\n\u003Cli>Include your rooom generated 3D models without any tech skills.\u003C\u002Fli>\n\u003Cli>Use the clean integration for keeping a fast loading time and a good seo.\u003C\u002Fli>\n\u003Cli>Increase your sales and lower your return rates with compelling 3D and augmented reality views of your products.\u003C\u002Fli>\n\u003Cli>Set your store apart from your competitors and offer your customers a unique shopping experience\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Conclusion\u003C\u002Fh4>\n\u003Cp>The rooom 3D Product Viewer for WooCommerce helps you realize the full potential of your rooom product viewer – with no loading time degradation, no programming knowledge, no error sources.\u003C\u002Fp>\n","The rooom extension is a powerful tool that allows you to integrate the rooom 3D Product Viewer quickly & easily into your product pages.",7015,"2025-04-17T13:39:00.000Z",[174,175,20,176,22],"360-deg-viewer","360-product-viewer","3d-model-display","https:\u002F\u002Fwww.rooom.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frooom-3d-product-viewer.1.1.3.zip",{"slug":180,"name":181,"version":182,"author":183,"author_profile":184,"description":185,"short_description":186,"active_installs":153,"downloaded":187,"rating":28,"num_ratings":28,"last_updated":188,"tested_up_to":16,"requires_at_least":189,"requires_php":190,"tags":191,"homepage":196,"download_link":197,"security_score":133,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"walktheweb","WalkTheWeb","3.0.2","Dr. Aaron Dishno","https:\u002F\u002Fprofiles.wordpress.org\u002Fadishno\u002F","\u003Cp>HTTP3D Inc., WalkTheWeb\u003C\u002Fp>\n\u003Cp>\u003Cstrong>About this plugin\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Extend your WooCommerce online store into the realm where over 700 million people play online games!\u003C\u002Fp>\n\u003Cp>WalkTheWeb 3D Store plugin creates a 3D Store for 3D Internet Metaverse\u002FMultiverse in about 5 minutes. Works like a 3D Game and integrates your products from WooCommerce.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FyuRCyd5YmCM?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>Think of a 3D Store as a 3D Graphical extension of your current online store – traditional website. A 3D Store shows your online store products, short descriptions, prices, and categories with links that open your online store product pages and shopping cart. We do not do any transactions for your online store or shopping cart, only redirect users to your online store; in a new browser tab or iframe based on permissions and settings you choose.\u003C\u002Fp>\n\u003Cp>The maintenance of your products, categories, images, shopping cart, and checkout process all stay in WooCommerce. We are not trying to reinvent the wheel! You have a store, we can help you reach more customers by adding a 3D Store!\u003C\u002Fp>\n\u003Cp>Your 3D Store is designed to be placed into many 3D Communities consisting of games, entertainment, amusement rides, animations, houses, businesses, and other 3D Stores. You maintain your 3D Store Building in one place and your 3D Store can be added to many 3D Communities. Read more at \u003Ca href=\"https:\u002F\u002Fwww.walktheweb.com\" rel=\"nofollow ugc\">walktheweb.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>WalkTheWeb Service is FREE\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>WalkTheWeb is a Software as a Service – SaaS – for the purpose of creating, publishing, and hosting 3D Websites.\u003C\u002Fp>\n\u003Cp>3D Websites are FREE to have, use, edit, and operate.\u003C\u002Fp>\n\u003Cp>You can create as many 3D Buildings, 3D Communities, 3D Things, and 3D Avatars as you like for free. Use this plugin for the wizard and basic settings or go directly to the \u003Ca href=\"https:\u002F\u002F3d.walktheweb.com\" rel=\"nofollow ugc\">WalkTheWeb 3D Internet\u003C\u002Fa> website Administration for full access to custimize your 3D Websites.\u003C\u002Fp>\n\u003Cp>\u003Cem>Free for you and free for your visitors!\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>\u003Cem>3D Community\u003C\u002Fem> https:\u002F\u002F3d.walktheweb.com\u002F\u003Cem>PUBLISHNAME\u003C\u002Fem> and\u003C\u002Fp>\n\u003Cp>\u003Cem>3D Building\u003C\u002Fem> https:\u002F\u002F3d.walktheweb.com\u002Fbuildings\u002F\u003Cem>PUBLISHNAME\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>are always free and established when you create your 3D Website.\u003C\u002Fp>\n\u003Cp>\u003Cem>PUBLISHNAME\u003C\u002Fem>s are on a first come first serve basis; with exception that we may revoke an official name if someone proves legal legitimacy to do so. Example: US Trademarks or copyrights. We do not allow vulgar or adult-only names or products. At this time all 3D Stores need to be appropriate for all ages; we do not cater to adult – 18 and above only – 3D Stores.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Optional Premium Upgrades and Services\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Optional Premium Upgrades and Services are paid additions and services. They are not required at any time.\u003C\u002Fp>\n\u003Cp>HTTP3D Inc. – WalkTheWeb offers:\u003Cbr \u002F>\n– Multiplayer services\u003Cbr \u002F>\n– Custom 3D Website design services\u003Cbr \u002F>\n– Use your Custom domain name for your 3D Website, like http:\u002F\u002F3d.YOURDOMAINNAME.com\u003Cbr \u002F>\n– Secure SSL Certs for your custom domain names, like https:\u002F\u002F3d.YOURDOMAINNAME.com\u003Cbr \u002F>\n– Service and Support Plans.\u003C\u002Fp>\n\u003Cp>These are all \u003Cem>optional\u003C\u002Fem> paid services and upgrades.\u003C\u002Fp>\n\u003Cp>Note that adding a \u003Cem>Custom Domain Name\u003C\u002Fem> like http:\u002F\u002F3d.YourDomainName.com works in addition to your original https:\u002F\u002F3d.walktheweb.com\u002FPUBLISHNAME. You can have more than one \u003Cem>Custom Domain Name\u003C\u002Fem> displaying the same 3D Community.\u003C\u002Fp>\n\u003Cp>All 3D Websites for 3D Browsing start with HTTP:\u002F\u002F3D or HTTPS:\u002F\u002F3D\u003C\u002Fp>\n\u003Cp>These are \u003Cem>U.S. Service Trademarks of HTTP3D Inc – WalkTheWeb\u003C\u002Fem> that signify and help identify that you will see a \u003Cem>3D Browsing\u003C\u002Fem> website based on a web address (URL).\u003C\u002Fp>\n\u003Ch3>Menu Options\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Getting Started – Dashboard\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cem>Dashboard\u003C\u002Fem> is to show you about 3D Internet and 3D Stores. It is the entry point to get started.\u003C\u002Fp>\n\u003Cp>Click the \u003Cem>Create a 3D Shopping Website\u003C\u002Fem> button to begin!\u003C\u002Fp>\n\u003Cp>The \u003Cem>Wizard Steps\u003C\u002Fem> take you through 5 steps to creating a \u003Cem>3D Store Website\u003C\u002Fem>:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Select a 3D Building from our list of 3D Store Templates. \u003C\u002Fli>\n\u003Cli>Select a 3D Community (3D Scene and landscape) from our list of 3D Community Templates.\u003C\u002Fli>\n\u003Cli>Set your \u003Cem>3D Host\u003C\u002Fem>, \u003Cem>3D Store Name\u003C\u002Fem>, and \u003Cem>URL\u003C\u002Fem> – https:\u002F\u002F3d.walktheweb.com\u002FYourBusinessName.\u003C\u002Fli>\n\u003Cli>Set the permissions: \u003Cem>WalkTheWeb® User Account\u003C\u002Fem> and \u003Cem>WooCommerce API Key\u003C\u002Fem>; easy with the wizard.\u003C\u002Fli>\n\u003Cli>Click Create it!\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>It takes about 5 Minutes and your 3D Website is up and running!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>3D Websites\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>3D Websites shows your list of created \u003Cem>3D Shopping Scenes\u003C\u002Fem> and \u003Cem>3D Shopping Buildings\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>\u003Cem>3D Shopping Scene\u003C\u002Fem> is the complete 3D Scene with Landscape and your 3D Shopping Store. This is the 3D Website you share with others to visit your 3D Store.\u003C\u002Fp>\n\u003Cp>\u003Cem>3D Shopping Building\u003C\u002Fem> is a 3D Website with only the 3D Shopping Building. When you add your 3D Store Building to multiple 3D Scenes, you can open this link to work your 3D Shopping Store. Work One 3D Store in Many 3D Scenes! Any multiplayer 3D Avatars from all 3D Scenes showing your 3D Store will be visible and using your keyboard you can chat. Hit enter to send a message to all in your 3D Scene or right click and choose Chat for one-on-one messages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>3D Hosts\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>3D Hosts are websites using WalkTheWeb 3D Internet Open-Source software. It can be downloaded on GitHub: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FHTTP3D\u002FWalkTheWeb\" rel=\"nofollow ugc\">github.com\u002FHTTP3D\u002FWalkTheWeb\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>When you add a 3D Host to the list on this page, the 3D Host will be available as an option when adding a new 3D Shopping Website. You must have Admin or Host access on the WalkTheWeb Host website to connect and add a 3D Website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Marketplace Downloads\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Marketplace Downloads are 3D Comunities, 3D Buildings (and 3D Stores), 3D Things, and 3D Avatars you can add to your 3D Websites. They are hosted by WalkTheWeb and many of them are free to download and use in your 3D Scenes.\u003C\u002Fp>\n\u003Cp>When you select one to download, it will prompt you for the WalkTheWeb server to send the request. After, when you log onto the server, the downloads will appear in the Download Queue on the Dashboard page under Admin Mode. If you are not logged in when requesting the download, you will need to access the 3D Website from the same computer to complete the download (IP Address based list).\u003C\u002Fp>\n\u003Cp>WalkTheWeb has 4 types of template downloads:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cem>3D Buildings\u003C\u002Fem>, which 3D Stores are a small number of select 3D Buildings from the many Shared 3D Building Templates. The 3D Buildings can be added to any 3D Scene to create 3D Internet Cities.\u003C\u002Fli>\n\u003Cli>\u003Cem>3D Communities\u003C\u002Fem>, these are the 3D Scenes. Some include basic buildings, roads, trees, etc.\u003C\u002Fli>\n\u003Cli>\u003Cem>3D Things\u003C\u002Fem>, which includes tables, chairs, trees, bushes, fountains, cash registers, and many other 3D Thing Templates. \u003C\u002Fli>\n\u003Cli>\u003Cem>3D Avatars\u003C\u002Fem>, are the set of avatars a new user can choose when they visit your 3D Website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>About WalkTheWeb\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>About WalkTheWeb provides many resources for using WalkTheWeb 3D Internet as well as contact information.\u003C\u002Fp>\n\u003Cp>If you would like to contact Dr. Aaron Dishno, the founder and CIO of WalkTheWeb (HTTP3D Inc.), please use the Discord link. Aaron welcomes questions and suggestions for enhancements.\u003C\u002Fp>\n","WalkTheWeb provides a Metaverse 3D Store front-end for your WooCommerce store in less than 5 minutes, to give you more Internet traffic and sales!",2510,"2025-04-22T19:40:00.000Z","4.7","5.2.4",[192,22,193,194,195],"3d_internet","metaverse","shopping_cart","woocommerce","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwalktheweb\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwalktheweb.3.0.2.zip",{"slug":199,"name":200,"version":201,"author":202,"author_profile":203,"description":204,"short_description":205,"active_installs":28,"downloaded":206,"rating":28,"num_ratings":28,"last_updated":207,"tested_up_to":135,"requires_at_least":17,"requires_php":137,"tags":208,"homepage":211,"download_link":212,"security_score":133,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":213},"step-kit-os","Step Kit OS","1.1.23","stepkitos","https:\u002F\u002Fprofiles.wordpress.org\u002Fstepkitos\u002F","\u003Cp>Step Kit OS is a comprehensive WooCommerce plugin that brings 3D product customization capabilities to your online store. It allows customers to personalize products in real-time through an interactive iframe interface, creating a unique shopping experience.\u003C\u002Fp>\n\u003Cp>Key Features:\u003Cbr \u002F>\n– Seamless integration with WooCommerce\u003Cbr \u002F>\n– Interactive 3D product customization interface\u003Cbr \u002F>\n– Real-time product preview\u003Cbr \u002F>\n– Custom product attributes support (size, name, number, signature, badge)\u003Cbr \u002F>\n– Dynamic pricing based on customization options (separate pricing for name and number)\u003Cbr \u002F>\n– Flexible number pricing (fixed price or per-digit pricing)\u003Cbr \u002F>\n– Persistent cart functionality across sessions\u003Cbr \u002F>\n– Mobile-responsive design\u003Cbr \u002F>\n– Guest user support with proper session handling\u003Cbr \u002F>\n– Custom meta data display in cart and orders\u003Cbr \u002F>\n– Automatic cart updates and fragment refresh\u003Cbr \u002F>\n– Session persistence during login\u002Flogout\u003Cbr \u002F>\n– Automatic simulator button injection on product pages\u003Cbr \u002F>\n– Enhanced security with proper nonce verification\u003C\u002Fp>\n\u003Cp>The plugin provides a complete solution for stores looking to offer customizable products with a modern, interactive interface.\u003C\u002Fp>\n\u003Ch3>Product Setup\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>Create Required Products:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Create four Variable Products in WooCommerce:\n\u003Cul>\n\u003Cli>Main Kit\u003C\u002Fli>\n\u003Cli>Secondary Kit\u003C\u002Fli>\n\u003Cli>Third Kit\u003C\u002Fli>\n\u003Cli>Goalkeeper Kit\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>For each product:\n\u003Cul>\n\u003Cli>Add the “size” attribute with variations (e.g., S, M, L, XL)\u003C\u002Fli>\n\u003Cli>Set prices and other required fields\u003C\u002Fli>\n\u003Cli>Publish the products\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Configure Product IDs:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Go to WooCommerce > Step Kit OS in your WordPress admin\u003C\u002Fli>\n\u003Cli>In the “Product Configuration” section:\n\u003Cul>\n\u003Cli>Select your products from the dropdown menus for each kit type\u003C\u002Fli>\n\u003Cli>The dropdowns automatically show all published WooCommerce products\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Save your settings\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Create Simulator Page:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Create a new page with the slug “simulador”\u003C\u002Fli>\n\u003Cli>Add the shortcode \u003Ccode>[custom_iframe]\u003C\u002Fcode> to the page content\u003C\u002Fli>\n\u003Cli>Publish the page\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Add Simulator Button:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Edit your product pages\u003C\u002Fli>\n\u003Cli>Add the shortcode \u003Ccode>[simulator_button]\u003C\u002Fcode> where you want the customization button to appear\u003C\u002Fli>\n\u003Cli>Or enable automatic button injection in the plugin settings\u003C\u002Fli>\n\u003Cli>Update the product pages\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Shortcodes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ccode>[custom_iframe]\u003C\u002Fcode> – Displays the customization iframe\u003C\u002Fli>\n\u003Cli>\u003Ccode>[simulator_button]\u003C\u002Fcode> – Displays the simulator button\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Shortcode Parameters:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>For \u003Ccode>[custom_iframe]\u003C\u002Fcode>:\u003Cbr \u002F>\n– \u003Ccode>height\u003C\u002Fcode> – Iframe height (default: 100vh)\u003Cbr \u002F>\n– \u003Ccode>width\u003C\u002Fcode> – Iframe width (default: 100%)\u003Cbr \u002F>\n– \u003Ccode>border\u003C\u002Fcode> – Border style (default: none)\u003Cbr \u002F>\n– \u003Ccode>product_id\u003C\u002Fcode> – Specific product ID (optional)\u003C\u002Fp>\n\u003Cp>For \u003Ccode>[simulator_button]\u003C\u002Fcode>:\u003Cbr \u002F>\n– \u003Ccode>label\u003C\u002Fcode> – Button text (default: “Customizar Camisola”)\u003Cbr \u002F>\n– \u003Ccode>class\u003C\u002Fcode> – CSS classes for styling\u003Cbr \u002F>\n– \u003Ccode>product_id\u003C\u002Fcode> – Specific product ID (optional)\u003C\u002Fp>\n\u003Ch3>Testing\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Visit your store’s product page\u003C\u002Fli>\n\u003Cli>Click the “Customizar Camisola” button (created by the \u003Ccode>[simulator_button]\u003C\u002Fcode> shortcode or automatic injection)\u003C\u002Fli>\n\u003Cli>You will be redirected to the \u003Ccode>\u002Fsimulador\u003C\u002Fcode> page\u003C\u002Fli>\n\u003Cli>Test the customization features and complete the purchase flow\u003C\u002Fli>\n\u003C\u002Fol>\n","A powerful WooCommerce plugin that enables 3D product customization and strengthens the connection with customers.",475,"2026-01-29T00:48:00.000Z",[20,209,22,210,195],"customization","product-customizer","https:\u002F\u002Fstepnow.pt","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstep-kit-os.zip","2026-03-15T14:54:45.397Z",{"attackSurface":215,"codeSignals":396,"taintFlows":511,"riskAssessment":792,"analyzedAt":809},{"hooks":216,"ajaxHandlers":322,"restRoutes":352,"shortcodes":386,"cronEvents":394,"entryPointCount":395,"unprotectedCount":153},[217,223,228,232,236,240,244,247,250,252,255,258,260,263,267,271,273,277,281,284,287,291,295,298,302,306,310,314,318],{"type":218,"name":219,"callback":220,"file":221,"line":222},"filter","admin_footer_text","v3d_replace_footer","app.php",19,{"type":224,"name":225,"callback":226,"file":221,"line":227},"action","init","v3d_shortcodes_init",553,{"type":224,"name":229,"callback":230,"file":221,"line":231},"admin_enqueue_scripts","v3d_enqueue_upload_script",618,{"type":224,"name":225,"callback":233,"file":234,"line":235},"v3d_handle_downloads","download_file.php",27,{"type":218,"name":237,"callback":238,"priority":119,"file":239,"line":26},"rest_pre_serve_request","v3d_api_get_file_response","file_storage.php",{"type":224,"name":241,"callback":242,"file":239,"line":243},"rest_api_init","closure",128,{"type":218,"name":219,"callback":220,"file":245,"line":246},"order.php",32,{"type":224,"name":225,"callback":248,"file":245,"line":249},"v3d_order_shortcode_init",1626,{"type":224,"name":241,"callback":242,"file":245,"line":251},1680,{"type":224,"name":229,"callback":253,"file":245,"line":254},"v3d_order_ajax_api",1756,{"type":218,"name":219,"callback":220,"file":256,"line":257},"product.php",14,{"type":224,"name":241,"callback":242,"file":256,"line":259},455,{"type":224,"name":241,"callback":242,"file":261,"line":262},"send_form.php",124,{"type":224,"name":225,"callback":264,"file":265,"line":266},"v3d_init_custom_post_types","verge3d.php",141,{"type":224,"name":268,"callback":269,"file":265,"line":270},"admin_menu","v3d_add_menus",193,{"type":218,"name":219,"callback":220,"file":265,"line":272},199,{"type":224,"name":274,"callback":275,"file":265,"line":276},"admin_init","v3d_settings_init",891,{"type":224,"name":278,"callback":279,"file":265,"line":280},"wp_enqueue_scripts","v3d_init_custom_styles",1431,{"type":224,"name":229,"callback":282,"file":265,"line":283},"v3d_init_custom_styles_admin",1436,{"type":224,"name":229,"callback":285,"file":265,"line":286},"v3d_load_wp_media_files",1446,{"type":224,"name":288,"callback":289,"file":265,"line":290},"elementor\u002Fwidgets\u002Fregister","v3d_register_elementor_widget",1452,{"type":224,"name":278,"callback":292,"file":293,"line":294},"v3d_load_woo_scripts","woo_product.php",16,{"type":218,"name":296,"callback":297,"file":293,"line":235},"woocommerce_composite_script_dependencies","v3d_bootstap_woo_product_composite",{"type":224,"name":299,"callback":300,"file":293,"line":301},"plugins_loaded","v3d_plugins_loaded",29,{"type":218,"name":303,"callback":304,"file":293,"line":305},"woocommerce_product_data_tabs","v3d_product_tab",44,{"type":224,"name":307,"callback":308,"file":293,"line":309},"woocommerce_product_data_panels","v3d_product_tab_content",109,{"type":224,"name":311,"callback":312,"file":293,"line":313},"woocommerce_process_product_meta","v3d_save_product_settings",126,{"type":218,"name":315,"callback":316,"file":293,"line":317},"woocommerce_single_product_image_thumbnail_html","v3d_product_image",167,{"type":224,"name":319,"callback":320,"priority":321,"file":293,"line":131},"woocommerce_product_thumbnails","v3d_show_product_thumbnails",30,[323,328,331,334,337,340,344,346,350],{"action":324,"nopriv":325,"callback":324,"hasNonce":326,"hasCapCheck":326,"file":221,"line":327},"v3d_upload_app_file",false,true,621,{"action":329,"nopriv":325,"callback":329,"hasNonce":326,"hasCapCheck":326,"file":221,"line":330},"v3d_cleanup_app",701,{"action":332,"nopriv":325,"callback":332,"hasNonce":325,"hasCapCheck":325,"file":245,"line":333},"v3d_ajax_fetch_order_items",1707,{"action":335,"nopriv":325,"callback":335,"hasNonce":325,"hasCapCheck":325,"file":245,"line":336},"v3d_ajax_fetch_product_info",1715,{"action":338,"nopriv":325,"callback":338,"hasNonce":325,"hasCapCheck":326,"file":245,"line":339},"v3d_ajax_send_pdf",1734,{"action":341,"nopriv":325,"callback":341,"hasNonce":326,"hasCapCheck":325,"file":342,"line":343},"v3d_payment_done","payment.php",86,{"action":341,"nopriv":326,"callback":341,"hasNonce":326,"hasCapCheck":325,"file":342,"line":345},87,{"action":347,"nopriv":325,"callback":348,"hasNonce":325,"hasCapCheck":325,"file":293,"line":349},"v3d_woo_get_product_info","v3d_get_product_info",397,{"action":347,"nopriv":326,"callback":348,"hasNonce":325,"hasCapCheck":325,"file":293,"line":351},398,[353,361,367,372,377,382],{"namespace":354,"route":355,"methods":356,"callback":358,"permissionCallback":359,"file":239,"line":360},"verge3d\u002Fv1","\u002Fupload_file",[357],"POST","v3d_api_upload_file","__return_true",131,{"namespace":354,"route":362,"methods":363,"callback":365,"permissionCallback":359,"file":239,"line":366},"\u002Fget_file\u002F(?P\u003Cid>\\w+)",[364],"GET","v3d_api_get_file",137,{"namespace":354,"route":368,"methods":369,"callback":370,"permissionCallback":359,"file":245,"line":371},"\u002Fplace_order",[357],"v3d_api_place_order_form",1682,{"namespace":373,"route":368,"methods":374,"callback":375,"permissionCallback":359,"file":245,"line":376},"verge3d\u002Fv2",[357],"v3d_api_place_order_json",1687,{"namespace":354,"route":378,"methods":379,"callback":380,"permissionCallback":359,"file":256,"line":381},"\u002Fget_product_info\u002F(?P\u003Csku>.+)",[364],"v3d_api_get_product_info",457,{"namespace":354,"route":383,"methods":384,"callback":385,"permissionCallback":359,"file":261,"line":313},"\u002Fsend_form",[357],"v3d_api_send_form",[387,390],{"tag":4,"callback":388,"file":221,"line":389},"v3d_shortcode",551,{"tag":391,"callback":392,"file":245,"line":393},"verge3d_order","v3d_order_shortcode",1624,[],17,{"dangerousFunctions":397,"sqlUsage":414,"outputEscaping":416,"fileOperations":509,"externalRequests":28,"nonceChecks":294,"capabilityChecks":88,"bundledLibraries":510},[398,402,406,410],{"fn":399,"file":245,"line":400,"context":401},"system",394,"system($command, $return_var);",{"fn":403,"file":245,"line":404,"context":405},"passthru",401,"passthru($command, $return_var);",{"fn":407,"file":245,"line":408,"context":409},"exec",407,"exec($command, $output , $return_var);",{"fn":411,"file":245,"line":412,"context":413},"shell_exec",412,"$output = shell_exec($command);",{"prepared":28,"raw":28,"locations":415},[],{"escaped":417,"rawEcho":418,"locations":419},371,46,[420,423,425,427,429,431,433,435,436,438,439,441,444,446,448,450,452,454,456,458,459,461,463,465,467,469,471,473,475,478,480,482,483,486,488,490,492,494,496,497,498,500,501,503,505,507],{"file":221,"line":421,"context":422},105,"raw output",{"file":221,"line":424,"context":422},114,{"file":221,"line":426,"context":422},122,{"file":221,"line":428,"context":422},130,{"file":221,"line":430,"context":422},168,{"file":221,"line":432,"context":422},182,{"file":221,"line":434,"context":422},191,{"file":221,"line":434,"context":422},{"file":221,"line":437,"context":422},532,{"file":221,"line":437,"context":422},{"file":221,"line":440,"context":422},566,{"file":442,"line":443,"context":422},"elementor_widget.php",70,{"file":239,"line":445,"context":422},121,{"file":245,"line":447,"context":422},644,{"file":245,"line":449,"context":422},645,{"file":245,"line":451,"context":422},648,{"file":245,"line":453,"context":422},995,{"file":245,"line":455,"context":422},999,{"file":245,"line":457,"context":422},1015,{"file":245,"line":457,"context":422},{"file":245,"line":460,"context":422},1033,{"file":245,"line":462,"context":422},1040,{"file":245,"line":464,"context":422},1358,{"file":245,"line":466,"context":422},1360,{"file":245,"line":468,"context":422},1369,{"file":245,"line":470,"context":422},1375,{"file":256,"line":472,"context":422},157,{"file":256,"line":474,"context":422},410,{"file":476,"line":477,"context":422},"templates\\order_email_body.php",62,{"file":476,"line":479,"context":422},154,{"file":476,"line":481,"context":422},155,{"file":476,"line":481,"context":422},{"file":484,"line":485,"context":422},"templates\\order_form.php",12,{"file":484,"line":487,"context":422},15,{"file":489,"line":317,"context":422},"templates\\order_pdf.php",{"file":489,"line":491,"context":422},176,{"file":493,"line":27,"context":422},"templates\\payment_paypal.php",{"file":493,"line":495,"context":422},11,{"file":493,"line":321,"context":422},{"file":493,"line":321,"context":422},{"file":265,"line":499,"context":422},921,{"file":265,"line":499,"context":422},{"file":265,"line":502,"context":422},1011,{"file":265,"line":504,"context":422},1351,{"file":265,"line":506,"context":422},1460,{"file":293,"line":508,"context":422},198,31,[],[512,556,605,615,623,647,656,673,692,703,717,726,735,743,751],{"entryPoint":513,"graph":514,"unsanitizedCount":61,"severity":40},"v3d_app_menu (app.php:12)",{"nodes":515,"edges":549},[516,520,525,529,531,535,539,541,545,547],{"id":517,"type":518,"label":519,"file":221,"line":246},"n0","source","$_REQUEST['page'] (x3)",{"id":521,"type":522,"label":523,"file":221,"line":246,"wp_function":524},"n1","sink","echo() [XSS]","echo",{"id":526,"type":518,"label":527,"file":221,"line":528},"n2","$_REQUEST (x9)",73,{"id":530,"type":522,"label":523,"file":221,"line":421,"wp_function":524},"n3",{"id":532,"type":518,"label":533,"file":221,"line":534},"n4","$_REQUEST",69,{"id":536,"type":537,"label":538,"file":221,"line":534},"n5","transform","→ v3d_redirect_app()",{"id":540,"type":522,"label":523,"file":221,"line":440,"wp_function":524},"n6",{"id":542,"type":518,"label":543,"file":221,"line":544},"n7","$_POST",245,{"id":546,"type":537,"label":538,"file":221,"line":544},"n8",{"id":548,"type":522,"label":523,"file":221,"line":440,"wp_function":524},"n9",[550,551,552,553,554,555],{"from":517,"to":521,"sanitized":326},{"from":526,"to":530,"sanitized":326},{"from":532,"to":536,"sanitized":325},{"from":536,"to":540,"sanitized":325},{"from":542,"to":546,"sanitized":325},{"from":546,"to":548,"sanitized":325},{"entryPoint":557,"graph":558,"unsanitizedCount":604,"severity":40},"\u003Capp> (app.php:0)",{"nodes":559,"edges":593},[560,561,562,563,564,567,569,571,575,576,577,579,581,583,585,588,591],{"id":517,"type":518,"label":519,"file":221,"line":246},{"id":521,"type":522,"label":523,"file":221,"line":246,"wp_function":524},{"id":526,"type":518,"label":527,"file":221,"line":528},{"id":530,"type":522,"label":523,"file":221,"line":421,"wp_function":524},{"id":532,"type":518,"label":565,"file":221,"line":566},"$_POST (x6)",219,{"id":536,"type":522,"label":523,"file":221,"line":568,"wp_function":524},529,{"id":540,"type":518,"label":533,"file":221,"line":570},633,{"id":542,"type":522,"label":572,"file":221,"line":573,"wp_function":574},"fopen() [File Access]",680,"fopen",{"id":546,"type":518,"label":533,"file":221,"line":534},{"id":548,"type":537,"label":538,"file":221,"line":534},{"id":578,"type":522,"label":523,"file":221,"line":440,"wp_function":524},"n10",{"id":580,"type":518,"label":543,"file":221,"line":544},"n11",{"id":582,"type":537,"label":538,"file":221,"line":544},"n12",{"id":584,"type":522,"label":523,"file":221,"line":440,"wp_function":524},"n13",{"id":586,"type":518,"label":543,"file":221,"line":587},"n14",547,{"id":589,"type":537,"label":590,"file":221,"line":587},"n15","→ v3d_gen_app_iframe_html()",{"id":592,"type":522,"label":523,"file":221,"line":437,"wp_function":524},"n16",[594,595,596,597,598,599,600,601,602,603],{"from":517,"to":521,"sanitized":326},{"from":526,"to":530,"sanitized":326},{"from":532,"to":536,"sanitized":326},{"from":540,"to":542,"sanitized":326},{"from":546,"to":548,"sanitized":325},{"from":548,"to":578,"sanitized":325},{"from":580,"to":582,"sanitized":325},{"from":582,"to":584,"sanitized":325},{"from":586,"to":589,"sanitized":325},{"from":589,"to":592,"sanitized":325},3,{"entryPoint":606,"graph":607,"unsanitizedCount":118,"severity":40},"v3d_handle_downloads (download_file.php:3)",{"nodes":608,"edges":613},[609,610],{"id":517,"type":518,"label":533,"file":234,"line":88},{"id":521,"type":522,"label":611,"file":234,"line":294,"wp_function":612},"header() [Header Injection]","header",[614],{"from":517,"to":521,"sanitized":325},{"entryPoint":616,"graph":617,"unsanitizedCount":118,"severity":40},"\u003Cdownload_file> (download_file.php:0)",{"nodes":618,"edges":621},[619,620],{"id":517,"type":518,"label":533,"file":234,"line":88},{"id":521,"type":522,"label":611,"file":234,"line":294,"wp_function":612},[622],{"from":517,"to":521,"sanitized":325},{"entryPoint":624,"graph":625,"unsanitizedCount":118,"severity":40},"v3d_order_menu (order.php:23)",{"nodes":626,"edges":642},[627,630,632,635,636,638,640],{"id":517,"type":518,"label":628,"file":245,"line":629},"$_REQUEST (x2)",110,{"id":521,"type":522,"label":611,"file":245,"line":631,"wp_function":612},119,{"id":526,"type":518,"label":633,"file":245,"line":634},"$_REQUEST['page']",153,{"id":530,"type":522,"label":523,"file":245,"line":634,"wp_function":524},{"id":532,"type":518,"label":533,"file":245,"line":637},60,{"id":536,"type":537,"label":639,"file":245,"line":637},"→ v3d_display_order()",{"id":540,"type":522,"label":523,"file":245,"line":641,"wp_function":524},643,[643,644,645,646],{"from":517,"to":521,"sanitized":326},{"from":526,"to":530,"sanitized":326},{"from":532,"to":536,"sanitized":325},{"from":536,"to":540,"sanitized":325},{"entryPoint":648,"graph":649,"unsanitizedCount":61,"severity":40},"v3d_order_add_actions_metabox (order.php:1024)",{"nodes":650,"edges":654},[651,653],{"id":517,"type":518,"label":628,"file":245,"line":652},1030,{"id":521,"type":522,"label":523,"file":245,"line":460,"wp_function":524},[655],{"from":517,"to":521,"sanitized":325},{"entryPoint":657,"graph":658,"unsanitizedCount":118,"severity":40},"v3d_product_menu (product.php:7)",{"nodes":659,"edges":669},[660,662,663,665,667],{"id":517,"type":518,"label":633,"file":256,"line":661},93,{"id":521,"type":522,"label":523,"file":256,"line":661,"wp_function":524},{"id":526,"type":518,"label":533,"file":256,"line":664},38,{"id":530,"type":537,"label":666,"file":256,"line":664},"→ v3d_display_product()",{"id":532,"type":522,"label":523,"file":256,"line":668,"wp_function":524},190,[670,671,672],{"from":517,"to":521,"sanitized":326},{"from":526,"to":530,"sanitized":325},{"from":530,"to":532,"sanitized":325},{"entryPoint":674,"graph":675,"unsanitizedCount":118,"severity":40},"\u003Cproduct> (product.php:0)",{"nodes":676,"edges":687},[677,679,680,683,684,685,686],{"id":517,"type":518,"label":678,"file":256,"line":661},"$_REQUEST['page'] (x2)",{"id":521,"type":522,"label":523,"file":256,"line":661,"wp_function":524},{"id":526,"type":518,"label":681,"file":256,"line":682},"$_REQUEST (x6)",45,{"id":530,"type":522,"label":523,"file":256,"line":472,"wp_function":524},{"id":532,"type":518,"label":533,"file":256,"line":664},{"id":536,"type":537,"label":666,"file":256,"line":664},{"id":540,"type":522,"label":523,"file":256,"line":668,"wp_function":524},[688,689,690,691],{"from":517,"to":521,"sanitized":326},{"from":526,"to":530,"sanitized":326},{"from":532,"to":536,"sanitized":325},{"from":536,"to":540,"sanitized":325},{"entryPoint":693,"graph":694,"unsanitizedCount":118,"severity":40},"v3d_redirect_same (verge3d.php:1477)",{"nodes":695,"edges":701},[696,699],{"id":517,"type":518,"label":697,"file":265,"line":698},"$_SERVER",1479,{"id":521,"type":522,"label":611,"file":265,"line":700,"wp_function":612},1480,[702],{"from":517,"to":521,"sanitized":325},{"entryPoint":704,"graph":705,"unsanitizedCount":61,"severity":40},"\u003Cwoo_product> (woo_product.php:0)",{"nodes":706,"edges":713},[707,708,709,711,712],{"id":517,"type":518,"label":543,"file":293,"line":424},{"id":521,"type":522,"label":523,"file":293,"line":508,"wp_function":524},{"id":526,"type":518,"label":543,"file":293,"line":710},140,{"id":530,"type":537,"label":590,"file":293,"line":710},{"id":532,"type":522,"label":523,"file":221,"line":437,"wp_function":524},[714,715,716],{"from":517,"to":521,"sanitized":325},{"from":526,"to":530,"sanitized":325},{"from":530,"to":532,"sanitized":325},{"entryPoint":718,"graph":719,"unsanitizedCount":28,"severity":725},"v3d_upload_app_file (app.php:623)",{"nodes":720,"edges":723},[721,722],{"id":517,"type":518,"label":533,"file":221,"line":570},{"id":521,"type":522,"label":572,"file":221,"line":573,"wp_function":574},[724],{"from":517,"to":521,"sanitized":326},"low",{"entryPoint":727,"graph":728,"unsanitizedCount":28,"severity":725},"v3d_display_order (order.php:634)",{"nodes":729,"edges":733},[730,732],{"id":517,"type":518,"label":633,"file":245,"line":731},640,{"id":521,"type":522,"label":523,"file":245,"line":731,"wp_function":524},[734],{"from":517,"to":521,"sanitized":326},{"entryPoint":736,"graph":737,"unsanitizedCount":28,"severity":725},"v3d_display_product (product.php:136)",{"nodes":738,"edges":741},[739,740],{"id":517,"type":518,"label":633,"file":256,"line":479},{"id":521,"type":522,"label":523,"file":256,"line":479,"wp_function":524},[742],{"from":517,"to":521,"sanitized":326},{"entryPoint":744,"graph":745,"unsanitizedCount":28,"severity":725},"\u003Cverge3d> (verge3d.php:0)",{"nodes":746,"edges":749},[747,748],{"id":517,"type":518,"label":697,"file":265,"line":698},{"id":521,"type":522,"label":611,"file":265,"line":700,"wp_function":612},[750],{"from":517,"to":521,"sanitized":326},{"entryPoint":752,"graph":753,"unsanitizedCount":604,"severity":791},"\u003Corder> (order.php:0)",{"nodes":754,"edges":781},[755,756,757,758,759,762,763,764,765,766,768,770,775,777,779],{"id":517,"type":518,"label":628,"file":245,"line":629},{"id":521,"type":522,"label":611,"file":245,"line":631,"wp_function":612},{"id":526,"type":518,"label":678,"file":245,"line":634},{"id":530,"type":522,"label":523,"file":245,"line":634,"wp_function":524},{"id":532,"type":518,"label":760,"file":245,"line":761},"$_REQUEST (x5)",108,{"id":536,"type":522,"label":523,"file":245,"line":641,"wp_function":524},{"id":540,"type":518,"label":533,"file":245,"line":637},{"id":542,"type":537,"label":639,"file":245,"line":637},{"id":546,"type":522,"label":523,"file":245,"line":641,"wp_function":524},{"id":548,"type":518,"label":533,"file":245,"line":767},374,{"id":578,"type":537,"label":769,"file":245,"line":767},"→ wp_mail()",{"id":580,"type":522,"label":771,"file":772,"line":773,"wp_function":774},"file_put_contents() [File Write]","utils.php",115,"file_put_contents",{"id":582,"type":518,"label":533,"file":245,"line":776},480,{"id":584,"type":537,"label":778,"file":245,"line":776},"→ v3d_terminal()",{"id":586,"type":522,"label":780,"file":245,"line":412,"wp_function":411},"shell_exec() [RCE]",[782,783,784,785,786,787,788,789,790],{"from":517,"to":521,"sanitized":326},{"from":526,"to":530,"sanitized":326},{"from":532,"to":536,"sanitized":326},{"from":540,"to":542,"sanitized":325},{"from":542,"to":546,"sanitized":325},{"from":548,"to":578,"sanitized":325},{"from":578,"to":580,"sanitized":325},{"from":582,"to":584,"sanitized":325},{"from":584,"to":586,"sanitized":325},"critical",{"summary":793,"deductions":794},"The Verge3D plugin v4.11.0 presents a mixed security posture. While it demonstrates strengths such as 100% use of prepared statements for SQL queries and a high percentage of properly escaped output, significant concerns remain. The plugin has a substantial attack surface with 17 entry points, of which 10 lack authentication or capability checks, including 4 AJAX handlers and all 6 REST API routes. This widespread lack of authorization is a critical weakness. Furthermore, taint analysis reveals one critical severity flow with unsanitized paths, indicating a potential for severe vulnerabilities like Remote Code Execution if not properly handled. The vulnerability history is also concerning, with 6 known CVEs, including one high-severity vulnerability, indicating a pattern of past security issues. Although there are currently no unpatched vulnerabilities, the historical types of vulnerabilities (Missing Authorization, CSRF, XSS, Unrestricted Upload) align with the observed weaknesses in the static analysis.",[795,797,799,801,803,805,807],{"reason":796,"points":153},"4 AJAX handlers without auth checks",{"reason":798,"points":485},"6 REST API routes without permission callbacks",{"reason":800,"points":487},"1 critical severity taint flow",{"reason":802,"points":495},"11 flows with unsanitized paths",{"reason":804,"points":487},"1 high severity known CVE",{"reason":806,"points":487},"5 medium severity known CVEs",{"reason":808,"points":100},"4 dangerous functions used","2026-03-16T19:36:46.476Z",{"wat":811,"direct":824},{"assetPaths":812,"generatorPatterns":817,"scriptPaths":818,"versionParams":819},[813,814,815,816],"\u002Fwp-content\u002Fplugins\u002Fverge3d\u002Fadmin\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fverge3d\u002Fadmin\u002Fjs\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fverge3d\u002Fpublic\u002Fcss\u002Fverge3d.css","\u002Fwp-content\u002Fplugins\u002Fverge3d\u002Fpublic\u002Fjs\u002Fverge3d.js",[],[814,816],[820,821,822,823],"verge3d\u002Fadmin\u002Fcss\u002Fadmin.css?ver=","verge3d\u002Fadmin\u002Fjs\u002Fadmin.js?ver=","verge3d\u002Fpublic\u002Fcss\u002Fverge3d.css?ver=","verge3d\u002Fpublic\u002Fjs\u002Fverge3d.js?ver=",{"cssClasses":825,"htmlComments":829,"htmlAttributes":833,"restEndpoints":836,"jsGlobals":840,"shortcodeOutput":844},[826,827,828],"verge3d-container","verge3d-controls","verge3d-preloader",[830,831,832],"\u003C!-- Verge3D Application Start -->","\u003C!-- Verge3D Application End -->","\u003C!-- Verge3D Shortcode -->",[834,835],"data-v3d-app","data-v3d-config",[837,838,839],"\u002Fwp-json\u002Fverge3d\u002Fv1\u002Fapp","\u002Fwp-json\u002Fverge3d\u002Fv1\u002Forder","\u002Fwp-json\u002Fverge3d\u002Fv1\u002Fproduct",[841,842,843],"v3d_plugins_url","v3d_app_data","Verge3D",[845,846],"[verge3d_app]","[verge3d_product]"]