ChordNews
← All news

Attackers Target Unpatched Maximum-Severity CryptoPayment Gateway WordPress Plugin Flaw

By ChordNews · First written

Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
Image: thehackernews.com
Comments 0

Summary

Threat actors are attempting to exploit an unpatched maximum-severity vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The flaw, tracked as CVE-2026-81648 with a CVSS score of 10.0, could let unauthenticated users delete arbitrary files on the server. The reporting's headline states that the flaw can also expose wallet credentials. The article is cut off before giving full details of the extraction risk.

This continues an earlier story: Attackers begin probing for unpatched Oracle E-Business Suite flaw

Later: Attackers Attempt to Exploit OpenSSH SSHole Flaw That Can Allow Sign-Ins to Accounts With No Password

Timeline

  1. The Hacker News

    Source ↗

    Threat actors are attempting to exploit an unpatched maximum-severity flaw, CVE-2026-81648 (CVSS 10.0), in the CryptoPayment Gateway WordPress plugin, according to Defused Cyber, and successful exploitation could let unauthenticated users delete arbitrary files on the server.

Comments

No comments yet.

    to like and comment.

    © 2026 ChordNews