CVE-2025-14829critical

CVE-2025-14829: fallo crítico en E-xact | Hosted Payment |

e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear E-xact | Hosted Payment |

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 0.3%
The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Productos afectados
Unknown · E-xact | Hosted Payment |