CVE-2024-38690: Avirtum Ipanorama 360 WordPress Virtual Tour Builder

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.3.

Affected products

• Avirtum Ipanorama 360 WordPress Virtual Tour Builder: up to and including 1.8.3
• Ipanorama 360 WordPress Virtual Tour Builder Project Ipanorama 360 WordPress Virtual Tour Builder: up to and including 1.8.3

Published 2024-11-01. Last modified 2026-06-17.