Breaking: CVE-2025-14829 - e-xact-hosted-payment <= 2.0 - unauthenticated arbitrary file deletion

CVE ID : CVE-2025-14829 Published : Jan. 13, 2026, 6:15 a.m. | 26 minutes ago Description : The E-xact | Hosted Payment | WordPress plugin through 2.0 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor