CVE-2025-14829

Publication date

2026-01-13 06:00:07

Family

WPScan

State

PUBLISHED

Description

The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.