Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 17:02:48 +0000 CVE-2025-13801 — Yoco Payments <= 3.9.0 - Unauthenticated Arbitrary File Read https://cve.radiocsirt.org/vuln/cve-2025-13801 <p><strong>Affected:</strong> yocoadmin Yoco Payments</p> <p>The Yoco Payments plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 3.9.0 via the file parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.</p> <p><strong>Affected:</strong> yocoadmin Yoco Payments</p> <p>The Yoco Payments plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 3.9.0 via the file parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.</p> https://cve.radiocsirt.org/vuln/cve-2025-13801