gcdRadar

arbitrary-file-deletion

1 live · 1 on record · last incident 11 days ago

Dec ’25records per month, by first reportNov ’26

Live1

  1. live10.0
    CryptoPayment Gateway WordPress plugin CVE-2026-81648: Unpatched CryptoPayment Gateway Flaw Targeted

    Patch now · Exploited · No patch yet · since 3 Nov 2026 · CVE-2026-81648

    Threat actors are attempting to exploit an unpatched maximum-severity vulnerability in the CryptoPayment Gateway WordPress plugin. The flaw permits unauthenticated users to delete arbitrary files and extract credentials.

    Do:Disable the vulnerable plugin until a patch becomes available.

Earlier0

Nothing closed yet.