Skip to content

Known CVE

Yoco Payments <= 3.8.8 - Path Traversal

Yoco Payments WordPress plugin <= 3.8.8 contains a path traversal caused by improper validation of the file parameter, letting unauthenticated attackers read arbitrary files on the server.

CVE-2025-13801

High2025CVSS 7.5CWE-22

wordpress · wp-plugin · yoco · lfi · path-traversal · unauth

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website