Skip to content
OpenAdvisories

Vendor

webandprint

8 known vulnerabilities.

Products

AR for WordPress 5 AR for WooCommerce 2 Augmented Reality 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-14352

    AR for WooCommerce <= 8.40 - Unauthenticated Path Traversal to Arbitrary File Read via 'file' Parameter

    The AR for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the…

    webandprint AR for WooCommerce Web / CMS
  • High 7.5
    CVE-2026-14327

    AR for WordPress <= 8.40 - Unauthenticated Arbitrary File Read via 'file' Parameter

    The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the s…

    webandprint AR for WordPress Web / CMS
  • High 7.5
    CVE-2023-54350

    WordPress Augmented-Reality Plugin Remote Code Execution Unauthenticated

    WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execute arbitrary PHP files. Attackers can send POST requests to the connector.minimal.php endpoint…

    webandprint Augmented Reality