CVE-2026-39734

Impact

Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.

Affected products

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/advisories/GHSA-m6hr-57jf-5hcg
• https://nvd.nist.gov/vuln/detail/CVE-2026-39734
• https://patchstack.com/database/wordpress/plugin/wp-easy-pay/vulnerability/wordpress-wp-easypay-plugin-4-5-4-path-traversal-vulnerability?_s_id=cve