Webandprint vulnerabilities
We track 6 vulnerabilities in Webandprint products across 4 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on July 3, 2026.
Latest Webandprint vulnerabilities
- 7.5 High severity
AR for WooCommerce: Improper Limitation of a Pathname to a Restricted Directory
The AR for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the
- 7.5 High severity
AR for WordPress: Improper Limitation of a Pathname to a Restricted Directory
The AR for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.40 via the 'file' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the se
- 7.5 High severity
Augmented Reality: Missing Authentication for Critical Functionality
WordPress Augmented-Reality plugin contains a remote code execution vulnerability in the elFinder connector that allows unauthenticated attackers to upload and execute arbitrary PHP files. Attackers can send POST requests to the connector.minimal.php endpoint
- 9.6 Critical severity
AR For WordPress: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in webandprint AR For WordPress ar-for-wordpress allows Upload a Web Shell to a Web Server.This issue affects AR For WordPress: from n/a through <= 8.34.
- 10.0 Critical severity
AR For Woocommerce: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For Woocommerce ar-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects AR For Woocommerce: from n/a through <= 6.3.
- 10.0 Critical severity
AR For WordPress: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For WordPress ar-for-wordpress allows Upload a Web Shell to a Web Server.This issue affects AR For WordPress: from n/a through <= 6.6.