news
The Hacker News
November 3rd, 2026 at 5:34 AMAttackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the flaw could permit unauthenticated users to delete arbitrary files on the server and extract
Get stories like this every Monday
The week's most important AI news in one email. Free, unsubscribe anytime.
Score: 2.35
Engagement proxy: 0
Canonical link: https://thehackernews.com/2026/11/attackers-target-unpatched.html