CVE-2026-81648

CVSS

—

EPSS

—

CISA KEV

Not listed

Exploitation

No report

Public exploits

None seen

State

Unknown

Coverage

• 

  The Hacker News◇Specialist. Specialist publisher: established trade press, or expert analysis with a track record4 hours ago

  Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

  Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the…

  ↗thehackernews.com/2026/11/attackers-target-unpa…(opens the publisher's site in a new tab)

What we observed