{"id":"CVE-2024-12300","aliases":["EUVD-2024-50755","GHSA-697v-r35h-ff64"],"status":"published","title":"AR for WordPress \u003c= 7.3 - Missing Authorization to Unauthenticated Limited File Upload","description":"The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_image() function in all versions up to, and including, 7.3. This makes it possible for unauthenticated attackers to upload php files leveraging a double extension attack. It's important to note the file is deleted immediately and double extension attacks only work on select servers making this unlikely to be successfully exploited.","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00392,"percentile":0.33773,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2024-12-13T03:24:35Z","modified":"2026-06-17T06:59:27Z","products":[{"vendor":"webandprint","product":"ar for wordpress"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/8b507369-49f7-4a1d-900b-c7bef40aec96?source=cve"},{"url":"https://plugins.trac.wordpress.org/browser/ar-for-wordpress/trunk/includes/ar-add-media.php?rev=3177638"},{"url":"https://plugins.trac.wordpress.org/changeset?sfp_email=\u0026sfph_mail=\u0026reponame=\u0026new=3206666%40ar-for-wordpress%2Ftrunk\u0026old=3205240%40ar-for-wordpress%2Ftrunk\u0026sfp_email=\u0026sfph_mail="},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12300"},{"url":"https://github.com/advisories/GHSA-697v-r35h-ff64"}],"sources":{"cve":[{"id":"CVE-2024-12300","title":"AR for WordPress \u003c= 7.3 - Missing Authorization to Unauthenticated Limited File Upload","description":"The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_image() function in all versions up to, and including, 7.3. This makes it possible for unauthenticated attackers to upload php files leveraging a double extension attack. It's important to note the file is deleted immediately and double extension attacks only work on select servers making this unlikely to be successfully exploited.","status":"published","published":"2024-12-13T03:24:35.103Z","modified":"2026-04-08T17:05:49.43Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:34:12.287582Z"}],"euvd":[{"id":"EUVD-2024-50755","description":"The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_image() function in all versions up to, and including, 7.3. This makes it possible for unauthenticated attackers to upload php files leveraging a double extension attack. It's important to note the file is deleted immediately and double extension attacks only work on select servers making this unlikely to be successfully exploited.","status":"published","published":"2024-12-13T03:24:35Z","modified":"2026-04-08T17:05:49Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T19:24:50.321121Z"}],"ghsa":[{"id":"GHSA-697v-r35h-ff64","title":"The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file...","description":"The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_image() function in all versions up to, and including, 7.3. This makes it possible for unauthenticated attackers to upload php files leveraging a double extension attack. It's important to note the file is deleted immediately and double extension attacks only work on select servers making this unlikely to be successfully exploited.","status":"published","published":"2024-12-13T06:30:58Z","modified":"2024-12-13T06:30:59Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:59:10.37232Z"}],"nvd":[{"id":"CVE-2024-12300","description":"The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_image() function in all versions up to, and including, 7.3. This makes it possible for unauthenticated attackers to upload php files leveraging a double extension attack. It's important to note the file is deleted immediately and double extension attacks only work on select servers making this unlikely to be successfully exploited.","status":"published","published":"2024-12-13T04:15:05.073Z","modified":"2026-06-17T06:59:27.387Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:10:40.137849Z"}]}}