Skip to content
OpenAdvisories

Product · webandprint

AR for WordPress

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-14327

    AR for WordPress <= 8.40 - Unauthenticated Arbitrary File Read via 'file' Parameter

    The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the s…

    webandprint AR for WordPress Web / CMS