File Retrieval Vulnerability in Yogeta WP Cloud Plugin for WordPress
CVE-2026-80494
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 12 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-80494?
The Yogeta WP Cloud WordPress plugin prior to version 1.0 is susceptible to a file retrieval vulnerability. This flaw arises from the plugin's failure to properly validate user-supplied file paths before using them in file-read functions on a public endpoint, which does not implement any form of authorization check. Consequently, unauthenticated attackers can exploit this weakness to download arbitrary files from the server, potentially exposing sensitive information, including user credentials.
Affected Version(s)
Yogeta WP Cloud 0 <= 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.