Critical Severity Vulnerability
This vulnerability has been rated as Critical severity. Immediate action is recommended.
CVE-2025-14829
Critical
Low
Medium
High
Critical
9.1
CVSS Score
Published: Jan 13, 2026
Last Modified: Jan 13, 2026
Vulnerability Description
The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.
CVSS Metrics
Common Vulnerability Scoring System
Vector String:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack Vector
N
Attack Complexity
L
Privileges Required
N
User Interaction
N
Scope
U
Confidentiality
N
Integrity
H
Availability
H
References & Resources
Severity Details
9.1
out of 10.0
Critical
Key Information
- Published Date
- January 13, 2026
