Advisories · Technology

webandprint AR for WordPress.

Every CVE that names webandprint AR for WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-14327 CVE record

CVSS 7.5 High

AR for WordPress <= 8.40 - Unauthenticated Arbitrary File Read via 'file' Parameter
- webandprint AR for WordPress
- Path traversal
Not analysed yet 3 Jul 2026
CVE-2025-60156 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

WordPress AR For WordPress plugin <= 8.34 - Cross Site Request Forgery (CSRF) vulnerability
- webandprint AR For WordPress
- Cross-site request forgery (CSRF)
Not analysed yet 26 Sept 2025
CVE-2025-26913 CVE record

CVSS 6.5 Medium

WordPress AR for WordPress plugin <= 7.7 - Cross Site Scripting (XSS) vulnerability
- webandprint AR For WordPress
- Cross-site scripting (XSS)
Not analysed yet 25 Feb 2025
CVE-2024-12300 CVE record

CVSS 3.7 Low

AR for WordPress <= 7.3 - Missing Authorization to Unauthenticated Limited File Upload
- webandprint AR for WordPress
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2024-50496 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress AR For WordPress plugin <= 6.6 - Arbitrary File Upload vulnerability
- webandprint AR For WordPress
- Unrestricted file upload
Not analysed yet 28 Oct 2024