CVE-2025-46486

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in totalprocessing Nomupay Payment Processing Gateway totalprocessing-card-payments allows Path Traversal.This issue affects Nomupay Payment Processing Gateway: from n/a through <= 7.1.7.

Score

CVSS 3.1 4.9 Medium

Status

Deferred - audit@patchstack.com

Published

2025-05-23

Last modified

2026-05-12

Weaknesses

CWE-22

Affected products

• Nomupay Payment Processing Gateway (Totalprocessing)

References

• https://patchstack.com/database/Wordpress/Plugin/totalprocessing-card-payments/vulnerability/wordpress-nomupay-payment-…