wordpress

1 live · 1 on record · last incident 11 days ago

Dec ’25records per month, by first reportNov ’26

Live1

live10.0
CryptoPayment Gateway WordPress plugin CVE-2026-81648: Unpatched CryptoPayment Gateway Flaw Targeted
Patch now · Exploited · No patch yet · since 3 Nov 2026 · CVE-2026-81648
Threat actors are attempting to exploit an unpatched maximum-severity vulnerability in the CryptoPayment Gateway WordPress plugin. The flaw permits unauthenticated users to delete arbitrary files and extract credentials.
Do:Disable the vulnerable plugin until a patch becomes available.

Nothing closed yet.