CVE-2025-14829

9.1CRITICAL

The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to de

Publicado: 1/13/2026Atualizado: 1/13/2026
Ver no NVDVer no MITRE

Descrição

The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.

Análise IADesenvolvido por IA

Referências