Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
· thehackernews.com · popularity 20/100 · 0 similar stories today · Cybersecurity (Technology & Consumer Electronics)
Read the original at thehackernews.com →
Summary
Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the flaw could permit unauthenticated users to delete arbitrary files on the server and extract
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 4.