Attackers Target Unpatched Crypto Payment Gateway Flaw That Can Expose Wallet Credentials
Threat actors are attempting to exploit CVE-2026-81648, a maximum-severity (CVSS 10.0) unpatched flaw in the CryptoPayment Gateway WordPress plugin, according to Defused Cyber. The flaw in versions 1.2.1 through 1.2.2 lets unauthenticated users invoke...