security Source: The Hacker News
๐Ÿ“… 03 November 2026 at 12:30 PM UTC

Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

Verified Primary Feed Ingestion
๐Ÿท๏ธ Identified Common Vulnerabilities & Exposures (CVE)
โšก Executive Takeaways & Intelligence Summary
Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the flaw could permit unauthenticated users to delete arbitrary files on the server and extract

๐Ÿ“ฐ Related Surveillance Disclosures