CVE-2024-50496

Severity

CRITICAL

CVSS

10.0

EPSS

0.00515

Risk score

40.18

CISA KEV

PoC

Published

2024-10-28

Modified

2026-05-11

First seen

2026-08-07

Aliases

EUVD-2024-44922, GHSA-RMMP-G38R-57JX

Products

webandprint:AR For WordPress 0 ≤6.6

Sources

euvd EUVD-2024-44922

Description

Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For WordPress ar-for-wordpress allows Upload a Web Shell to a Web Server.This issue affects AR For WordPress: from n/a through <= 6.6.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-44922
https://patchstack.com/database/Wordpress/Plugin/ar-for-wordpress/vulnerability/wordpress-ar-for-wordpress-plugin-6-2-arbitrary-file-upload-vulnerability?_s_id=cve