Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q25w-gj9h-7rj6

Опубликовано: 13 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.

The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.

EPSS

Процентиль: 24%
0.00079
Низкий

9.1 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.1
nvd
27 дней назад

The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.

EPSS

Процентиль: 24%
0.00079
Низкий

9.1 Critical

CVSS3