Skip to content
OpenAdvisories

Product · webandprint

Augmented Reality

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    WordPress Augmented-Reality Plugin Remote Code Execution Unauthenticated

    WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execute arbitrary PHP files. Attackers can send POST requests to the connector.minimal.php endpoint…