Webandprint
6 CVEs across 4 Webandprint products. Browse Webandprint vulnerabilities, severities, and proof-of-concept exploits.
Webandprint products with known CVEs
Webandprint CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-14352 | High | 7.5 | 2026-07-03 | The AR for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter… |
CVE-2026-14327 | High | 7.5 | 2026-07-03 | The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter. T… |
CVE-2023-54350 | High | 7.5 | 2026-06-08 | WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and… |
CVE-2025-60156 | Critical | 9.6 | 2025-09-26 | Cross-Site Request Forgery (CSRF) vulnerability in webandprint AR For WordPress ar-for-wordpress allows Upload a Web Shell to a Web Server.This issue affects A… |
CVE-2025-26913 | Medium | 6.5 | 2025-02-25 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webandprint AR For WordPress ar-for-wordpress allows DOM-… |
CVE-2024-12300 | Low | 3.7 | 2024-12-13 | The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_i… |
CVE-2024-50510 | Critical | 10.0 | 2024-10-30 | Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For Woocommerce ar-for-woocommerce allows Upload a Web Shell to a Web Server.Th… |
CVE-2024-50496 | Critical | 10.0 | 2024-10-28 | Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For WordPress ar-for-wordpress allows Upload a Web Shell to a Web Server.This i… |