Attackers reportedly target unpatched CryptoPayment Gateway plugin flaw CVE-2026-81648
Defused Cyber reports that threat actors are attempting to exploit CVE-2026-81648, a CVSS 10.0 flaw in the CryptoPayment Gateway WordPress plugin that has no patch yet.
Written by a model from the sources below. Verify against them.
- Kind
- Vulnerability
- Vendor
- CryptoPayment Gateway
- Product
- WordPress plugin
- Status
- Confirmed
- First seen
- Confirmed
Summary
Defused Cyber reports that threat actors are attempting to exploit CVE-2026-81648, a CVSS 10.0 flaw in the CryptoPayment Gateway WordPress plugin that has no patch yet. The flaw could let unauthenticated users delete server files and extract wallet credentials, though successful exploitation is not confirmed in the item.
What to do
Disable the CryptoPayment Gateway plugin until a patched version is released
Check the site for deleted or altered files and review wallet configuration
Rotate any wallet or API credentials stored through the plugin
Timeline
- Made public by The Hacker News
- First seen by cve.now
- Confirmed as CVE-2026-81648
Evidence 1
- PressThe Hacker News
“Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber.”
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about SZB-d80473442c
Has CryptoPayment Gateway confirmed it?
Yes. Confirmed as CVE-2026-81648.Source: The Hacker News
What should CryptoPayment Gateway users do?
Disable the CryptoPayment Gateway plugin until a patched version is released. Check the site for deleted or altered files and review wallet configuration. Rotate any wallet or API credentials stored through the plugin.
Does it have a CVE?
Yes. It is tracked as CVE-2026-81648.Source: CVE-2026-81648