Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
At a glance
- Severity
- CriticalCVSS 10.0
- Used in attacks
- Not on CISA’s list
- Flaws named
- CVE-2026-81648
- Vendors and products
- WordPress
- Reported by
- 1 outlet
Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the flaw could permit unauthenticated users to delete arbitrary files on the server and extract…
We summarise and link; this source is not one we hold a licence to reproduce. Everything below is what CyberBrief adds: the vulnerabilities involved, whether they are being exploited, who is named, and who else covered it.
Vulnerabilities referenced
- CVE-2026-8164810.0Critical
Product not named yet
The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of its AJAX endpoints, allowing unauthenticated users to invoke administrative operations, including deleting arbitrary files on the server, overwriting the payment gateway configuration and recovering stored wallet credentials in cleartext.
Full record →
Fastnexa security experts
Dealing with this in your own company?
If this story touches software, suppliers or systems you use, a Fastnexa security expert can tell you what it means for you and what to do first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Coverage
One outlet has carried this so far.
2026-11-03 05:34 UTC
Related stories
- Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
The Hacker News · 2026-11-03
- Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
The Hacker News · 2026-11-03
- Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
The Hacker News · 2026-11-03
- ISC Stormcast For Tuesday, November 3rd, 2026 https://isc.sans.edu/podcastdetail/10162, (Tue, Nov 3rd)
SANS Internet Storm Center · 2026-11-03
- UK faces ‘unprecedented rise’ in cyberattacks in coming months, warns cyber chief
The Record · 2026-11-03